R3303-HP HSR6800 Routers Layer 2 - WAN Configuration Guide

32
Ste
p
Command Remarks
3. Configure the PAP username
and password sent from the
local device to the supplicant
when the local device is
authenticated by the
supplicant by using PAP.
ppp pap local-user username
password { cipher | simple }
password
By default, when being
authenticated by the supplicant
using PAP, the local device sends
null username and password to the
supplicant.
Configuring CHAP authentication
According to whether the authenticator is configured with a username or not, the configuration of CHAP
authentication includes the following two types:
1. Configuring CHAP authentication when the authenticator name is configured
To configure the authenticator:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the local device to
authenticate the supplicant by
using CHAP.
ppp authentication-mode chap
[ [ call-in ] domain isp-name ]
By default, PPP authentication is
disabled.
4. Assign a username to the
CHAP authenticator.
ppp chap user username
The username you assign to the
authenticator must be the same as
the local username you assign to
the authenticator on the supplicant.
5. Configure local or remote
AAA authentication.
For local AAA
authentication, the
username and password of the
supplicant must be configured on
the authenticator.
For remote AAA
authentication,
the username and password of the
supplicant must be configured on
the remote AAA server.
For more information about AAA
authentication, see Security
Configuration Guide.
The username configured for the
supplicant must be the same as that
configured on the supplicant.
The passwords configured for the
authenticator and supplicant must
be the same.
To configure the supplicant:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Assign a username to the
CHAP supplicant.
ppp chap user username
The username you assign to the
supplicant here must be the same
as the local username you assign
to the supplicant on the
authenticator.