HP VPN Firewall Appliances VPN Command Reference

113
Related commands
l2tp enable
mandatory-chap
Use mandatory-chap to force the LNS to perform a CHAP authentication of the user.
Use undo mandatory-chap to disable CHAP authentication on the LNS.
Syntax
mandatory-chap
undo mandatory-chap
Default
An LNS does not perform CHAP authentication of users.
Views
L2TP group view
Default command level
2: System level
Usage guidelines
An LNS authenticates the client in addition to the proxy authentication that occurs at the LAC for higher
security. If the mandatory-chap command is used, two authentications are performed for the clients
connected to the VPN through an NAS-initialized tunnel: one on the NAS side and the other on the LNS
side. Some PPP clients might not support the second authentication. In this case, the LNS-side CHAP
authentication will fail.
Examples
# Perform CHAP authentication by force.
<Sysname> system-view
[Sysname] l2tp-group 1
[Sysname-l2tp1] mandatory-chap
Related commands
mandatory-lcp
mandatory-lcp
Use mandatory-lcp to force an LNS to perform LCP negotiation with users.
Use undo mandatory-lcp to disable the LCP negotiation.
Syntax
mandatory-lcp
undo mandatory-lcp
Default
An LNS does not perform LCP negotiation with users.