1.1.10 mandatory-chap
Syntax
mandatory-chap
undo mandatory-chap
View
L2TP group view
Parameter
None
Description
Using the mandatory-chap command, you can force the performing of the CHAP
re-authentication between LNS and Client. Using the undo mandatory-chap
command, you can disable the CHAP re-authentication.
By default, the CHAP re-authentication is not performed.
This command can only be used on LNS and is an optional configuration.
After LAC implements the proxy authentication on Client, LNS re-authenticates the
Client to improve the security. If the mandatory-chap command is used, the VPN
clients that connect with access server via initial tunnel will undergo twice
authentications: one is between clients and NAS (Network Access Server), and the
other is betweem clients and LNS (L2TP Network Server). If some PPP Clients do not
support re-authentication, the local CHAP authentication may fail.
For related commands, see mandatory-lcp.
Example
# Force the performing of the CHAP re-authentication. in L2TP group 1.
[3Com-l2tp1] mandatory-chap
1.1.11 mandatory-lcp
Syntax
mandatory-lcp
undo mandatory-lcp
VPN
11