H3C Technologies H3C SecPath F5020 - Manual (Page 14)

6
Step Command Remarks
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the authenticator to
authenticate the peer by using
CHAP.
ppp authentication-mode chap
[ [ call-in ] domain isp-name ] By default, PPP authentication is
disabled.
4. Configure a username for the
CHAP authenticator.
ppp chap user username
The default setting is null.
The username you configure for the
authenticator must be the same as
the local username you configure
for the authenticator on the peer.
5. Configure local or remote
AAA authentication.
For local AAA authentication, the
username and password of the
peer must be configured on the
authenticator.
For remote AAA authentication,
the username and password of the
peer must be configured on the
remote AAA server.
For more information about AAA
authentication, see Security
Configuration Guide.
The username configured for the
peer must be the same as that
configured on the peer.
The passwords configured for the
authenticator and peer must be the
same.
To configure the peer:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure a username for the
CHAP peer.
ppp chap user username
The default setting is null.
The username you configure for
the peer here must be the same as
the local username you configure
for the peer on the authenticator.
4. Configure local or remote
AAA authentication.
For local AAA authentication, the
username and password of the
authenticator must be configured on
the peer.
For remote AAA authentication, the
username and password of the
authenticator must be configured on
the remote AAA server.
For more information about AAA
authentication, see Security
Configuration Guide.
The username configured for the
authenticator must be the same as
that configured on the
authenticator.
The passwords configured for the
authenticator and peer must be
the same.
Configuring CHAP authentication when no authenticator name is configured
To configure the authenticator: