ADTRAN 5000 Series Command Reference Manual page 954

Command Reference Guide
The PPP username and password database is separate and distinct from the global
username password database. For PAP and CHAP, use the database under the PPP
interface configuration.
Several example scenarios are given below for clarity.
Configuring CHAP Example 1: Only the local router requires the peer to authenticate itself.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username Peer password same
On the peer (hostname Peer):
Peer(config-ppp 1)#ppp chap password same
The first line of this configuration sets the authentication mode to CHAP. This means the peer is required to
authenticate itself to the local router via CHAP. The second line is the username and password expected to
be sent from the peer. The peer uses its hostname and ppp chap password commands to send the
proper authentication information.
Both ends must have identical passwords.
Configuring CHAP Example 2: Using the ppp chap hostname command as an alternate solution.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username farend password same
On the peer (hostname Peer):
Peer(config-ppp 1)#ppp chap hostname farend
Peer(config-ppp 1)#ppp chap password same
Notice the local router is expecting username "farend" even though the peer router's hostname is "Peer."
Therefore the peer router can use the ppp chap hostname command to send the correct name in the
challenge.
Both ends must have identical passwords.
61200990L1-35E
PPP Interface Configuration Command Set
Copyright © 2005 ADTRAN 954