beautypg.com

Configuring the authenticatee, Configuring chap authentication, Configuring chap – H3C Technologies H3C SecPath F1000-E User Manual

Page 49: Authentication

background image

5

To do…

Use the command…

Remarks

Set a password for the local user

password { cipher | simple }
password

Required

Configure the service type of the
local user as PPP

service-type ppp

Required

Return to system view

quit

Create an ISP domain or enter an
existing ISP domain view

domain isp-name

Optional
To configure the ppp

authentication-mode command

with an ISP domain specified
which is not the default domain

system, configure this command

before configuring the ppp

authentication-mode command.

Configure local authentication for
the PPP users

authentication ppp local

Optional

Configuring the authenticatee

Follow these steps to configure the authenticatee:

To do…

Use the command…

Remarks

Enter system view

system-view

Create a VT interface and enter VT
interface view

interface virtual-template number

Configure the PAP username and
password sent from the local

device to the peer when the local
device is authenticated by the peer

by using PAP

ppp pap local-user username
password { cipher | simple }

password

Required
By default, when being
authenticated by the peer using

PAP, the local device sends null

username and password to the
peer.

Configuring CHAP authentication

According to whether the authenticator is configured with a username or not, the configuration of CHAP

authentication falls into the following two types:

Configuring CHAP authentication when the authenticator name is configured

1.

Configuring the authenticator

Follow these steps to configure the authenticator:

To do…

Use the command…

Remarks

Enter system view

system-view

Create a VT interface and enter VT
interface view

interface virtual-template number

Configure the local device to
authenticate the peer using CHAP

ppp authentication-mode chap
[ [ call-in ] domain isp-name ]

Required
By default, PPP authentication is
disabled.