Configuring Lan-To-Lan Connection Profiles - Cisco PIX 500 Series Configuration Manual

Chapter 30 Configuring Connection Profiles, Group Policies, and Users
For example, the following command designates that the tunnel-group ppp-attributes mode commands
that follow pertain to the connection profile named TG1. Notice that the prompt changes to indicate that
you are now in tunnel-group ppp-attributes mode:
hostname(config)# tunnel-group TG1 type remote-access
hostname(config)# tunnel-group TG1 ppp-attributes
hostname(config-tunnel-ppp)#
Specify whether to enable authentication using specific protocols for the PPP connection. The protocol
Step 2
value can be:
•
•
•
•
CHAP and MSCHAPv1 are enabled by default.
The syntax of this command is:
hostname(config-tunnel-ppp)# authentication protocol
hostname(config-tunnel-ppp)#
To disable authentication for a specific protocol, use the no form of the command:
hostname(config-tunnel-ppp)# no authentication protocol
hostname(config-tunnel-ppp)#
For example, the following command enables the use of the PAP protocol for a PPP connection.
hostname(config-tunnel-ppp)# authentication pap
hostname(config-tunnel-ppp)#
The following command enables the use of the MS-CHAP, version 2 protocol for a PPP connection:
hostname(config-tunnel-ppp)# authentication ms-chap-v2
hostname(config-tunnel-ppp)#
The following command enables the use of the EAP-PROXY protocol for a PPP connection:
hostname(config-tunnel-ppp)# authentication pap
hostname(config-tunnel-ppp)#
The following command disables the use of the MS-CHAP, version 1 protocol for a PPP connection:
hostname(config-tunnel-ppp)# no authentication ms-chap-v1
hostname(config-tunnel-ppp)#

Configuring LAN-to-LAN Connection Profiles

An IPSec LAN-to-LAN VPN connection profile applies only to LAN-to-LAN IPSec client connections.
While many of the parameters that you configure are the same as for IPSec remote-access connection
profiles, LAN-to-LAN tunnels have fewer parameters. To configure a LAN-to-LAN connection profile,
follow the steps in this section.
OL-12172-03
pap—Enables the use of Password Authentication Protocol for the PPP connection.
chap—Enables the use of Challenge Handshake Authentication Protocol for the PPP connection.
ms-chap-v1 or ms-chap-v2—Enables the use of Microsoft Challenge Handshake Authentication
Protocol, version 1 or version 2 for the PPP connection.
eap—Enables the use of Extensible Authentication protocol for the PPP connection.
Cisco Security Appliance Command Line Configuration Guide
Configuring Connection Profiles
30-15