H3C Technologies H3C SecPath F5020 - Manual (Page 16)

8
Step Command Remarks
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the authenticator to
authenticate the peer by using
MS-CHAP or MS-CHAP-V2.
ppp authentication-mode
{ ms-chap | ms-chap-v2 }
[ [ call-in ] domain isp-name ]
By default, PPP authentication is
disabled.
4. Configure a username for the
MS-CHAP or MS-CHAP-V2
authenticator.
ppp chap user username
The username for the authenticator
must be the same on the local and
peer devices.
5. Configure local or remote
AAA authentication.
For local AAA authentication, the
username and password of the
peer must be configured on the
authenticator.
For remote AAA authentication,
the username and password of the
peer must be configured on the
remote AAA server.
For more information about AAA
authentication, see Security
Configuration Guide.
The username and password of the
peer configured on the
authenticator or remote AAA
server must be the same as those
configured on the peer.
Configuring MS-CHAP or MS-CHAP-V2 authentication when no authenticator name is configured
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view. interface interface-type interface-number N/A
3. Configure the
authenticator to
authenticate the peer
by using MS-CHAP
or MS-CHAP-V2.
ppp authentication-mode { ms-chap |
ms-chap-v2 } [ [ call-in ] domain
isp-name ]
By default, PPP authentication is
disabled.
4. Configure local or
remote AAA
authentication.
For local AAA authentication, the
username and password of the peer must
be configured on the authenticator.
For remote AAA authentication, the
username and password of the peer must
be configured on the remote AAA server.
For more information about AAA
authentication, see Security Configuration
Guide.
The username and password of the
peer configured on the authenticator
or remote AAA server must be the
same as those configured on the
peer.
Configuring the polling feature
The polling feature checks PPP link state.
On an interface that uses PPP encapsulation, the link layer sends keepalive packets at keepalive intervals
to detect the availability of the peer. If the interface fails to receive keepalive packets when the keepalive
retry limit is reached, it tears down the link and reports a link layer down event.