topic Re: Radius Key string in Config - encrypted or plain text? in Wireless

Radius Key string in Config - encrypted or plain text?

wendyf123 — Sat, 03 Jul 2021 20:27:34 GMT

Is the radius key string in the running config for an aironet AP displayed in plain text or a hash? Thanks in advance.

Re: Radius Key string in Config - encrypted or plain text?

Benjamin Solero — Wed, 10 Jan 2007 00:18:00 GMT

Hi,

It could be displayed either way. If the digit preceding the key is a 7, then the key is hashed. If the digit preceding the key is a 0, then the key is unencrypted.

R1(config)#radius-server key ?

0 Specifies an UNENCRYPTED key will follow

7 Specifies HIDDEN key will follow

For example,

here's an encrypted key:

radius-server key 0 xxx

here's an unencrypted key:

radius-server key 7 xxx

Regards,

Ben

Re: Radius Key string in Config - encrypted or plain text?

Rob Huffman — Wed, 10 Jan 2007 13:50:49 GMT

Hi Ben,

Great answer! 5 points all the way.

Keep up the good work!

Rob

Re: Radius Key string in Config - encrypted or plain text?

jackyoung — Fri, 12 Jan 2007 02:53:36 GMT

Hi Ben, do you mean...

here's an encrypted key:

radius-server key 7 xxx

here's an unencrypted key:

radius-server key xxx

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hsec_r/sec_r1h.htm#wp1174071

Hope this helps.

Re: Radius Key string in Config - encrypted or plain text?

Benjamin Solero — Fri, 12 Jan 2007 06:27:36 GMT

Hi Jack,

My original post was correct. The moderator of the forum edited my post to remove the bogus passwords. Unfortunately, they also removed the preceding '7' and '0'. It's a safety precaution cisco.com uses to keep inadvertant posting of real passwords.

Anyway, thanks for posting.

-Ben

Re: Radius Key string in Config - encrypted or plain text?

jackyoung — Fri, 12 Jan 2007 07:28:58 GMT

Thanks for the clarifiaction. Ben. I do not know there is moderator will edit the post in Cisco forum .... 🙂