Comware

 View Only
last person joined: yesterday 

Back to discussions
Expand all | Collapse all

encrypted RADIUS PSK

This thread has been viewed 13 times

  • 1.  encrypted RADIUS PSK

    Posted Feb 02, 2023 05:40 AM
    Hello all,

    I have two switches: Aruba 2930M and FlexFabric 5710 48SFP+
    I need to configure RADIUS authentication using encrypted PSK. Unfortunately, I forgot how to encrypt the PSK.

    for Aruba I know how to specify a plain text PSK:
    radius-server host 192.168.100.101 key "********************"​

    I know how to specify a cipher PSK for FlexFabric:

    key authentication cipher ***********************​

    But how to encrypt\encode these PSK?

    Thank you in advance!


  • 2.  RE: encrypted RADIUS PSK

    Posted Feb 02, 2023 06:28 AM
    for Aruba it was easy - just run the command:
     encrypt-credentials​

    Original Message


  • 3.  RE: encrypted RADIUS PSK
    Best Answer

    EMPLOYEE
    Posted Feb 02, 2023 06:38 AM
    Hi,

    Are you looking for something like this?

    [HPE-radius-rad]key authentication sim
    [HPE-radius-rad]key authentication simple ?
    STRING<1-64> Plaintext key string

    [HPE-radius-rad]key authentication simple admin ?
    <cr>

    [HPE-radius-rad]key authentication simple admin
    [HPE-radius-rad]dis this
    #
    radius scheme rad
    key authentication cipher $c$3$4NXcyUStgf7lFV1uwMaq4+2IzyEmRVz7
    #

    --> Comware automatically encrypts the simple/plaintext PSKs like you see above for "admin".

    ------------------------------
    Brian(HPE)
    ------------------------------

    Original Message


  • 4.  RE: encrypted RADIUS PSK

    Posted Feb 02, 2023 06:51 AM
    Ok, I got this. I don't have to write "cipher", but just "simple myPSK"

    Thank you!
    Original Message