beautypg.com

Configuring pap authentication, Configuring the authenticator – H3C Technologies H3C SecPath F1000-E User Manual

Page 139

background image

114

Step Command

Remarks

4.

Configure the PPP authentication
modes.

Configuring PAP authentication

Configuring CHAP

authentication

Configuring MS-CHAP or

MS-CHAP-V2 authentication

Optional.
PPP authentication is

disabled by default.
You can configure several
authentication modes

simultaneously. In LCP

negotiation, the
authenticator negotiates with

the authenticatee in the

sequence of configured

authentication modes until
the LCP negotiation

succeeds. If the response

packet from the
authenticatee carries a

recommended authentication

mode, the authenticator
directly uses the

authentication mode if it finds

the mode configured.

5.

Configure PPP negotiation.

See "

Configuring PPP negotiation

." Optional.

6.

Enable PPP traffic statistics

collection.

See "

Enabling PPP traffic statistics

collection

."

Optional.

7.

Enable the ignoring of next-hop

address matching.

See "

Enabling the ignoring of

next-hop address matching

."

Optional.

NOTE:

This chapter only discusses local authentication. For more information about the remote AAA
authentication, see

Access Control Configuration Guide.

Configuring PAP authentication

Configuring the authenticator

Step

Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Create a VT interface and

enter its view.

interface virtual-template number

N/A

3.

Configure the local device to
authenticate the peer by using

PAP.

ppp authentication-mode pap
[ [

call-in ] domain isp-name ]

By default, PPP authentication is
disabled.

4.

Return to system view.

quit

N/A

5.

Create a local user account
for the authenticatee and

enter local user view.

local-user username N/A