3Com 4500 50-PORT Switch User Manual


 
RADIUS Protocol Configuration Commands 275
<4500>display stop-accounting-buffer time-range 0:0:0-2003/08/31
23:59:59-2003/08/31
Total find 0 record
key Syntax
key { accounting | authentication } string
undo key { accounting | authentication }
View
RADIUS Scheme View
Parameter
accounting: Configures to set/delete the authentication key for the RADIUS
accounting packet.
authentication: Configures to set/delete the encryption key for RADIUS
authentication/authorization packet.
string: Specifies the key with a character string not exceeding 16 characters. By
default, the key is “3Com”.
Description
Use the key command to configure encryption key for RADIUS
authentication/authorization or accounting packet. Use the
undo key command
to restore the default key.
RADIUS client (Switch) and RADIUS server use MD5 algorithm to hash the
exchanged packets. The two ends verify the packet through setting the key. Only
when the keys are identical can both ends accept the packets from each other and
give responses. So it is necessary to ensure that the keys set on the Switch and the
RADIUS server are identical. If the authentication/authorization and accounting are
performed on two different servers with different keys, you should set two keys
respectively.
Related commands: primary accounting, primary authentication, radius
scheme
.
Example
Example 1:
To set the authentication/authorization key of the RADIUS scheme to “hello”,
enter the following:
<4500>system-view
System View: return to User View with Ctrl+Z.
[4500]radius scheme 3Com
[4500-radius-3Com]key authentication hello