topic Re: Radius Server key not encrypting in Network Security

Radius Server key not encrypting

Jennercramer — Tue, 26 May 2020 17:11:31 GMT

Greetings!

I am very new to NX-OS, and it has been an uphill battle getting everything working. My current issue is that I cannot get my aaa shared keys to encrypt. They are set on level 7 but when I perform a show run, it shows in clear text on most of the switches. On one switch (identical configuration for now) it has encrypted, but cannot get the others to follow in its footsteps. Does anyone have any advice on what the issue might be?

Re: Radius Server key not encrypting

balaji.bandi — Tue, 26 May 2020 18:39:07 GMT

never seen this before

here is the example :

Configuring Global Preshared Keys

You can configure preshared keys at the global level for all servers used by the Nexus 5000 Series switch. A preshared key is a shared secret text string between the Nexus 5000 Series switch and the RADIUS server hosts.

To configure global preshared keys, obtain the preshared key values for the remote RADIUS servers and perform this task:

	Command	Purpose
Step 1	switch# configure terminal	Enters configuration mode.
Step 2	switch(config)# radius-server key [ 0 \| 7 ] key-value	Specifies a preshared key for all RADIUS servers. You can specify a clear text (0) or encrypted (7) preshared key. The default format is clear text. The maximum length is 63 characters. By default, no preshared key is configured.
Step 3	switch(config)# exit	Exits configuration mode.
Step 4	switch# show radius-server	(Optional) Displays the RADIUS server configuration. Note The preshared keys are saved in encrypted form in the running configuration. Use the show running-config command to display the encrypted preshared keys.
Step 5	switch# copy running-config startup-config	(Optional) Copies the running configuration to the startup configuration.

Re: Radius Server key not encrypting

NetworkTeamRialto — Wed, 10 Jan 2024 23:13:56 GMT

Try adding

service password-encryption

Re: Radius Server key not encrypting

Marvin Rhoads — Mon, 15 Jan 2024 13:35:49 GMT

On NX-OS it is actually a feature command, not a service command. The service command applies to IOS devices.

N7K(config)# feature password encryption ? aes Encrypt using AES encryption standard

Re: Radius Server key not encrypting

balaji.bandi — Mon, 15 Jan 2024 14:13:34 GMT

service password-encryption

what is the error you getting, have added feature ?