Requiring A Peer To Authenticate Itself To The Local Router - HP ProCurve 7000dl Series Basic Management And Configuration Manual

Using the Web Browser Interface for Basic Configuration Tasks
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
14-66
CHAP is more secure because the actual password does not cross the wire,
where anyone could intercept it. The peer that is authenticating itself hashes
its password and sends the hash value to the challenging peer instead. The
challenger, who has the password stored in its PPP database, performs the
same hash function. It compares the result with the value it received from
the peer.
Both peers must use the same protocol.
You can configure the ProCurve Secure Router to require authentication from
a peer, or to authenticate itself to a peer, or both.

Requiring a Peer to Authenticate Itself to the Local Router

1. Select Physical Interfaces under System in the navigation bar.
2. Choose the logical interface for the connection whose remote endpoint
you want to authenticate. (It must, of course, be a PPP interface.)
3. You will enter the PPP Config window. Move to Authentication Settings
in the PPP configuration for "ppp <interface number>" window.
Figure 14-46. Configuring Two-Way PAP Authentication
4. In the pull-down menu for Peer Authentication Type, select PAP or CHAP.