H3C Technologies H3C SR8800 - Manual (Page 36)

28
Step Command Remarks
3. Configure the local
device to
authenticate the peer
by using MS-CHAP
or MS-CHAP-V2.
ppp authentication-mode { ms-chap |
ms-chap-v2 } [ [ call-in ] domain
isp-name ]
By default, PPP authentication is
disabled.
4. Return to system view. quit N/A
5. Create a local user
account for the
supplicant and enter
local user view.
local-user username N/A
6. Set the password for
the local user.
password { cipher | simple } password N/A
7. Set the service type
of the local user to
PPP.
service-type ppp N/A
8. Return to system view quit N/A
9. Create an ISP
domain, or enter an
existing ISP domain
view
domain isp-name
Optional.
To configure the ppp
authentication-mode command with
an ISP domain specified which is not
the default domain system, configure
this command before configuring the
ppp authentication-mode command.
10. Configure local
authentication for the
PPP users.
authentication ppp local Optional.
NOTE:
For how to create the local user and the ISP domain, and set their attributes, see Security Configuration
Guide.
Configuring PPP negotiation
Introduction to PPP negotiation parameters
PPP negotiation parameters that can be configured include:
• Negotiation timeout time
• IP address negotiation
1. Negotiation timeout time
Negotiation timeout time determines the interval for sending request packets. During PPP
negotiation, if no response is received from the peer during a specific period after the local router
sends a packet, the router sends the request packet again. The period is known as negotiation
timeout time, which ranges from 1 to 10 seconds.
2. IP address negotiation
IP address negotiation can be implemented in the following two modes:
{
The router operating as the client. You can configure the local interface to operate in this mode
if it uses PPP as its link layer protocol but does not have an IP address, whereas the peer is