H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 110)

100
Step Command Remarks
3. Assign a username to the
CHAP authenticatee.
ppp chap user username
The username you assign to the
authenticatee must be the same as the
local username you assign to the
authenticatee on the authenticator.
4. Set the default CHAP
authentication password. ppp chap password { cipher |
simple } password
The password you set for the
authenticatee must be the same as the
password you set for the authenticatee
on the authenticator.
Configuring MS-CHAP or MS-CHAP-V2
authentication
In MS-CHAP or MS-CHAP-V2 authentication, an H3C device can only be an authenticator
L2TP supports the MS-CHAP authentication but does not support the MS-CHAP-V2 authentication.
Password change in MS-CHAP-V2 authentication does not support local authentication, but is used only
in RADIUS authentication.
To configure the authenticator for MS-CHAP or MS-CHAP-V2 authentication:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view. interface interface-type interface-number N/A
3. Configure the local
device to
authenticate the peer
by using MS-CHAP
or MS-CHAP-V2.
ppp authentication-mode { ms-chap |
ms-chap-v2 } [ [ call-in ] domain
isp-name ]
By default, PPP authentication is
disabled.
4. Return to system view. quit N/A
5. Create a local user
account for the
authenticatee and
enter local user view.
local-user username N/A
6. Set the password for
the local user.
password { cipher | simple } password N/A
7. Set the service type
of the local user to
PPP.
service-type ppp N/A
8. Return to system view quit N/A
9. Create an ISP
domain, or enter an
existing ISP domain
view
domain isp-name
Optional.
To configure the ppp
authentication-mode command with
an ISP domain specified which is not
the default domain system, configure
this command before configuring the
ppp authentication-mode command.