H3C Technologies H3C SecPath F1000-E - Manual (Page 145)

120
device sends the packet again. The period is known as negotiation timeout time, which ranges from 1 to
10 seconds.
IP address negotiation
IP address negotiation can be implemented in the following two modes:
• The device operating as the client: You can configure the local interface to operate in this mode if
it uses PPP at the data link layer but does not have an IP address, whereas the peer is configured
with an IP address, after which the interface can receive an IP address allocated by its peer. This
configuration applies to the situations where you access the Internet through ISP.
• The device operating as the server: In this case, you must configure a local IP address pool in
domain view or system view to specify the range of the IP addresses to be allocated, and then bind
the address pool to the interface.
DNS address negotiation
PPP address negotiation can also determine the DNS server address. You can configure a device to
allocate the DNS server address to the peer or receive the DNS server address from the peer. Normally,
for a PPP link between a PC and the firewall, the DNS server address is usually allocated by the firewall,
through which the PC can access the Internet directly by using domain names. For a PPP link established
between the firewall and the access server of a carrier, the DNS server address is usually allocated by
the access server, through which the firewall can resolve domain names through the DNS server address
allocated by the access server.
Configuring the PPP negotiation timeout time
Step Command Remarks
1. Enter system view. system-view N/A
2. Create a VT interface and
enter its view.
interface virtual-template number N/A
3. Configure the negotiation
timeout time.
ppp timer negotiate seconds
Optional.
3 seconds by default.
Configuring IP address negotiation
Configuring the local end as the client
Step Command
1. Enter system view. system-view
2. Create a VT interface and enter its view. interface virtual-template number
3. Enable IP address negotiation. ip address ppp-negotiate
Configuring the local end as the server
To configure the local end as the server (for cases where PPP authentication is not enabled):