HP MSR Router Series Wan Access Configuration Manual page 17

Step
1. Enter system view.
2. Enter interface view.
3. Configure the authenticator to
authenticate the peer by using
CHAP.
4. Configure local or remote AAA
authentication.
To configure the peer:
Step
1. Enter system view.
2. Enter interface view.
3. Configure a username for
the CHAP peer.
4. Set the CHAP
authentication password.
Configuring MS-CHAP or MS-CHAP-V2 authentication
When you configure MS-CHAP or MS-CHAP-V2 authentication, follow these guidelines:
The device can only act as an authenticator for MS-CHAP or MS-CHAP-V2 authentication.
•
• L2TP supports only MS-CHAP authentication.
MS-CHAP-V2 authentication supports password change only when using RADIUS.
•
To configure MS-CHAP or MS-CHAP-V2 authentication when the authenticator name is configured:
Step
1. Enter system view.
Command
system-view
interface interface-type
interface-number
ppp authentication-mode chap
[ [ call-in ] domain isp-name ]
For local AAA authentication, the
username and password of the
peer must be configured on the
authenticator.
For remote AAA authentication,
the username and password of the
peer must be configured on the
remote AAA server.
For more information about AAA
authentication, see Security
Configuration Guide.
Command
system-view
interface interface-type
interface-number
ppp chap user username
ppp chap password { cipher |
simple } password
Command
system-view
8
Remarks
N/A
N/A
By default, PPP
authentication is disabled.
The username configured
for the peer must be the
same as that configured on
the peer.
The passwords configured
for the authenticator and
peer must be the same.
Remarks
N/A
N/A
The default setting is null.
The username you configure on
the peer must be the same as the
local username you configure for
the peer on the authenticator.
The default setting is null.
The password you set on the
peer must be the same as the
password you set for the peer on
the authenticator.
Remarks
N/A