Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide Chapter 1 PPP and MP Configuration Commands
3Com Corporation
1-5
View
Interface view, virtual-template interface view
Parameter
chap, pap: Authentication mode. You must specify either option, but not both of them.
call-in: Authenticates the peer only when a call from a remote user is received.
domain: Domain name in user authentication.
Description
Use the ppp authentication-mode command to set the mode that the local PPP uses
to authenticate the peer router.
Use the undo ppp authentication-mode command to disable authentication.
If you configure the ppp authentication-mode { pap | chap } command without
specifying a domain, the system-default domain named system applies by default,
adopting local authentication and using the address pool you configured for this domain
for address allocation.
If a domain is specified, you must configure an address pool in the specified domain.
If a received username includes a domain name, this domain name is used for
authentication (if the name does not exist, authentication is denied). Otherwise, the
domain name configured for PPP authentication applies.
If the username does not include a domain name, and the domain name configured for
PPP authentication does not exist, authentication is denied also.
By default, no authentication is performed.
There are two PPP authentication algorithms:
z PAP is a two-way handshake authentication.
z CHAP is a three-way handshake authentication.
In addition, the defined AAA authentication algorithm list can be used.
Either CHAP or PAP is just an authentication process. The success of the
authentication is decided by AAA, which can authenticate on the basis of the local
authentication database or AAA server.
Related command: local-user, ppp chap user, ppp pap local-user, ppp pap
password, ppp chap password.
Example
# Authenticate the peer router by means of PAP on interface Serial 0/0/0.
[3Com-Serial0/0/0] ppp authentication-mode pap domain system