Configuring A Local Device With A User Name To Authenticate Its Peer In Chap Mode - Huawei Quidway S9300 Configuration Manual - Wan Access

Quidway S9300 Terabit Routing Switch
Configuration Guide - WAN Access
2.5.2 Configuring a Local Device with a User Name to Authenticate
Its Peer in CHAP Mode
This section describes how to configure the authenticator with a user name to authenticate the
peer in CHAP mode.
Context
Procedure
l
Issue 02 (2011-07-15)
NOTE
In CHAP authentication, when configuring the username for the authenticator, ensure that the same
password is configured for the authenticator and the authenticated.
Configuring the authenticator
1. Run:
system-view
The system view is displayed.
2. Run:
aaa
The AAA view is displayed.
3. Run:
local-user user-name password { simple | cipher } password
The username and password of the authenticated are added to the local user list.
4. Run:
quit
Return to the system view.
5. Run:
interface interface-type interface-number
The interface view is displayed.
6. Run:
ppp authentication-mode chap [ pap ]
The local end authenticates the peer end by using CHAP.
You can run the ppp authentication-mode chap pap command to perform CHAP
negotiation preferentially in LCP negotiation. If the peer end does not support CHAP
authentication, PAP negotiation is performed. If the peer end does not support CHAP
or PAP, the LCP negotiation fails. Either CHAP or PAP is involved in a PPP
negotiation.
7. Run:
ppp chap user user-name
The local username is configured.
8. Run:
restart
The interface is restarted.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 PPP Configuration
26