R0106-HP MSR Router Series Layer 2 - WAN Command Reference(V7)

10
You can use the display domain command to display the domain configuration.
If you configure the ppp authentication-mode command without specifying the domain keyword, the
system checks the username for domain information.
• If the username contains an ISP domain name, this ISP domain will be used for authentication. If the
ISP domain does not exist on the local device, the user's access request is denied.
• If the username does not contain an ISP domain name, the default ISP domain is used. You can use
the domain default command to configure the default ISP domain. If no default ISP domain is
configured, the default ISP domain system is used.
For authentication on a dialup interface, configure authentication on both the physical interface and the
dialer interface. When a physical interface receives a DDR call request, it first initiates PPP negotiation
and authenticates the dial-in user. Then it passes the call to the upper layer protocol.
Examples
# Configure interface Serial 2/1/0 to authenticate the peer by using PAP.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp authentication-mode pap
# Configure interface Serial 2/1/0 to authenticate the peer by using PAP, CHAP, and MS-CHAP.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp authentication-mode pap chap ms-chap
Related commands
• domain default (Security Command Reference)
• local-user (Security Command Reference)
• ppp chap password
• ppp chap user
• ppp pap local-user
ppp chap password
Use ppp chap password to set the password for CHAP authentication.
Use undo ppp chap password to cancel the configuration.
Syntax
ppp chap password { cipher | simple } password
undo ppp chap password
Default
No password is set.
Views
Interface view
Predefined user roles
network-admin