Ppp_Sec_Auto; Ppp_Security_Protocol - Bay Networks 6300 Supplement Manual

Book C
Remote Annex 6300 Supplement to the Remote Annex Administrator's Guide for UNIX

ppp_sec_auto

This asynchronous/synchronous parameter, used in conjunction with the
ppp_security_protocol parameter, allows you to use auto_detect mode
for PPP clients whether or not the clients support PAP/CHAP. Valid values
are Y and N. If ppp_sec_auto is set to Y and enable_security is set to
Y, and if the user accesses the RA 6300 in CLI mode (e.g., by entering a
carriage return after dialing in) and then switches to ppp mode (by issuing
the ppp command), the RA 6300 treats the ppp_security_protocol as if
it were set to none.
If ppp_sec_auto is set to Y and enable_security is set to Y, and if the
RA 6300 determines (via a mode parameter of auto_detect) that a dial-
in user is using PPP, the RA 6300 uses the current value of

ppp_security_protocol.

The default for ppp_sec_auto is N, which specifies that no matter how
the user is placed in ppp mode, the RA 6300 interprets
ppp_security_protocol as described next.
ppp_security_protocol
This asynchronous/synchronous port parameter defines the security
check for the peer that the RA 6300 requires before starting the network
control protocol. If the RA 6300 wants to use security and the peer
refuses, the RA 6300 closes the link. Valid options are chap (challenge-
handshake protocol), pap (password authentication protocol), chap-pap,
and none. The default is none.
LCP requests for CHAP received by the RA 6300 are always ACKed,
regardless of this parameter's setting.
Chapter 2 Configuration Parameters
C-87