R0106-HP MSR Router Series Layer 2 - WAN Command Reference(V7)

9
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp acfc remote-reject
ppp authentication-mode
Use ppp authentication-mode to configure the PPP authentication mode.
Use undo ppp authentication-mode to disable PPP authentication.
Syntax
ppp authentication-mode { chap | ms-chap | ms-chap-v2 | pap } * [ [ call-in ] domain isp-name ]
undo ppp authentication-mode
Default
PPP authentication is disabled.
Views
Interface view
Predefined user roles
network-admin
Parameters
chap: Uses CHAP authentication.
ms-chap: Uses MS-CHAP authentication.
ms-chap-v2: Uses MS-CHAP-V2 authentication.
pap: Uses PAP authentication.
call-in: Authenticates the call-in users only. This keyword can be configured when the local end serves as
the receiving end of DDR calls. For more information about DDR, see Layer 2
— WAN Access
Configuration Guide.
domain isp-name: Specifies the ISP domain name for authentication, a case-insensitive string of 1 to 24
characters.
Usage guidelines
PPP authentication includes the following categories:
• PAP—Two-way handshake authentication. The password used is in plain text.
• CHAP—Three-way handshake authentication. The password is in cipher text.
• MS-CHAP—Three-way handshake authentication. The password is in cipher text.
• MS-CHAP-V2—Three-way handshake authentication. The password is in cipher text.
You can configure several authentication modes simultaneously.
In any PPP authentication mode, AAA determines whether a user can pass the authentication through a
local authentication database or an AAA server. For more information about AAA authentication, see
Security Configuration Guide.
If you configure the ppp authentication-mode command with the domain keyword specified, you must do
the following:
• Authenticate the peer by using the specified ISP domain.
• Use an address pool associated with this ISP domain for address allocation (if necessary).