Setting Up Bidirectional Chap In Radius For Outgoing Calls - Lucent Technologies MAX 6000 Configuration Manual

Configuring Individual WAN Connections
Configuring bidirectional CHAP support
Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
In the user profile, Ascend-Send-Secret is set to the password sent to the called device during
the authentication initiated by the MAX unit:
Mike1
Note that the Answer or Answer-Defaults profile must contain the desired bidirectional
authentication mode (None, Required, or Allowed). If CLID or DNIS pre-authentication is not
in use, the pseudo-user profile must be suppressed, and the second-tier user profile must
contain the Ascend-Bi-Directional-Auth attribute.

Setting up bidirectional CHAP in RADIUS for outgoing calls

To configure a RADIUS dialout profile that makes use of bidirectional authentication, proceed
as follows:
1
2
3
4
5
6
For example:
Mike1-out
route-tnt-pat-1 User-Password="ascend", Service-Type=Outbound-User
4-68
User-Password="passin"
Service-Type=Framed-User,
Ascend-Send-Secret="passout",
Framed-Protocol=PPP,
Framed-Address=111.5.1.1,
Framed-Netmask=255.255.255.255,
Ascend-Data-Svc=Switched-64K,
Ascend-Route-IP=Route-IP-Yes
Set the User-Name parameter to the name of the called party, and User-Password to
ascend.
Set the Ascend-Send-Auth parameter to Send-Auth-CHAP.
Set the Ascend-Send-Secret parameter to the text of the secret sent to the called device.
Set the Ascend-Receive Secret parameter to the text of the secret received from the called
device.
Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or
Bi-Directional-Auth-Required.
Set the Ascend-Recv-Name parameter to the name of the called party.
User-Password="ascend" Service-Type=Outbound-User,
User-Name="Mike1",
Framed-Protocol=PPP,
Framed-IP-Address=111.5.1.1,
Framed-IP-Netmask=255.255.255.0,
Ascend-Dial-Number=90492386067,
Ascend-Data-Svc=Switched-64K,
Ascend-Send-Auth=Send-Auth-CHAP,
Ascend-Send-Secret="passout",
Ascend-Receive-Secret="passin",
Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
Ascend-Route-IP=1
Framed-Route="111.5.1.0/30 111.5.1.1 1 n Mike1-out"
MAX 6000/3000 Network Configuration Guide