Encryption for RADIUS key?

Question

On the N-Series switches, the radius key is, by default, shown in plaintext in the configuration file.

There's an option via CLI to specify an encrypted value, but it says the parameter length should be exactly 256 characters. The CLI documentation doesn't specify any further about the encryption type or how to pre-encrypt the password.

I tried "SHA256-ing" my key but this only outputs 64 hex (256 bits). When it tells me 256 characters, I'm assuming that this means 256 hex (i.e. 1024 bits)? I don't know how to generate this value from my key... any guidance?

Thanks!

DELL-Josh Cr · Accepted Answer

This is something that we are going to need to release a new firmware version to resolve. So for now unencrypted is the only option.

DELL-Josh Cr · Answer

Hi, If you use your unencrypted string with the key encrypted command does it show the same key when you do show-running config?

DELL-Josh Cr · Answer

What version is the switch firmware at?

charlieosborne · Answer

Hi Josh,

Thanks for getting back!

Unfortunately I can't even input the unencrypted key -- if you enter any value less than 256 characters it throws an error that the key must be exactly 256 characters.

Any ideas?

Thanks,

Charlie

charlieosborne · Answer

Firmware is at 6.2.1.6 (and the issue was also occurring on  6.0.1.3)

DELL-Josh Cr · Answer

I am still looking into this.

charlieosborne · Answer

Hi Josh, thank for looking into this and following up. We'll look for this feature in the future. Thanks again, Charlie

Networking General

Encryption for RADIUS key?

Was this post helpful?