3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

448 CHAPTER 25: DVPN CONFIGURATION COMMANDS
Example
# Specify to use AES for encryption, SHA1 for authentication, and DH-Group1 for
key negotiation.
[SecBlade_VPN-dvpn-class-abc] algorithm-suite 11
authentication-client
method
Syntax
authentication-client method { none | { chap | pap } [ domain isp-name ] }
View
DVPN policy views
Parameter
pap: Specifies the DVPN server to authenticate clients using PAP (password
authentication protocol).
none: Specifies the DVPN server not to authenticate clients.
chap: Specifies the DVPN server to authenticate clients using CHAP (challenge
authentication protocol).
domain isp-name: Specifies the DVPN server to authenticate clients using domain.
Description
Use the authentication-client method command to specify how the DVPN
server that has the DVPN policy applied authenticates clients. CHAP and PAP are
currently available.
By default, the client is not authenticated.
Example
# Configure a DVPN policy to specify to authenticate clients using CHAP.
[SecBlade_VPN-dvpn-policy-abc] authentication-client method chap
authentication-server
method
Syntax
authentication-server method { none | pre-share }
View
DVPN class views
Parameter
none: Specifies the client not to authenticate the DVPN server.
pre-share: Specifies the client to authenticate the DVPN server using a
pre-shared-key.
Description
Use the authentication-server method command to specify whether or not a
client authenticates the DVPN server it accesses.
A client does not authenticate the DVPN server it accesses by default.