F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

113
Ste
p
Command Remarks
214. Configure local or remote
AAA authentication.
For local AAA authentication, the
username and password of the supplicant
must be configured on the authenticator.
For remote AAA authentication, the
username and password of the supplicant
must be configured on the remote AAA
server.
For more information about AAA
authentication, see Access Control
Configuration Guide.
The username configured for
the supplicant must be the
same as that configured on
the supplicant.
The passwords configured
for the authenticator and
supplicant must be the same.
To configure the supplicant:
Ste
p
Command Remarks
215. Enter system view.
system-view N/A
216. Enter interface view.
interface interface-type
interface-number
N/A
217. Assign a username to the
CHAP supplicant.
ppp chap user username
The username you assign to the
supplicant must be the same as the
local username you assign to the
supplicant on the authenticator.
218. Set the CHAP
authentication password.
ppp chap password { cipher |
simple } password
The password you set for the
supplicant must be the same as the
password you set for the
supplicant on the authenticator.
1164BConfiguring MS-CHAP or MS-CHAP-V2 authentication
When you configure MS-CHAP or MS-CHAP-V2 authentication, follow these guidelines:
• In MS-CHAP or MS-CHAP-V2 authentication, an HP device can only be an authenticator
• L2TP supports the MS-CHAP authentication but does not support the MS-CHAP-V2 authentication.
• MS-CHAP-V2 authentication supports password changing only when using RADIUS.
Depending on whether the authenticator is configured with a username, the configuration of MS-CHAP
or MS-CHAP-V2 authentication falls into the following two types:
1. Configuring MS-CHAP or MS-CHAP-V2 authentication when the authenticator name is configured
Ste
p
Command Remarks
219. Enter system view. system-view N/A
220. Enter interface view.
interface interface-type
interface-number
N/A
221. Configure the local device to
authenticate the supplicant by
using MS-CHAP or
MS-CHAP-V2.
ppp authentication-mode
{ ms-chap | ms-chap-v2 }
[ [ call-in ] domain isp-name ]
By default, PPP authentication is
not performed.