HPE FlexNetwork MSR Series Comware 5 Layer 2 - Wan Access Configuration Manual page 20

Step
Configure local or remote AAA
4.
authentication.
To configure the supplicant:
Step
Enter system view.
1.
Enter interface view.
2.
Assign a username to
3.
the CHAP supplicant.
Set the CHAP
4.
authentication password.
Configuring MS-CHAP or MS-CHAP-V2 authentication
When you configure MS-CHAP or MS-CHAP-V2 authentication, follow these guidelines:
•
In MS-CHAP or MS-CHAP-V2 authentication, an HPE device can only be an authenticator
•
L2TP supports the MS-CHAP authentication but does not support the MS-CHAP-V2
authentication.
•
MS-CHAP-V2 authentication supports password changing only when using RADIUS.
Depending on whether the authenticator is configured with a username, the configuration of
MS-CHAP or MS-CHAP-V2 authentication includes the following two types:
•
Configuring MS-CHAP or MS-CHAP-V2 authentication when the authenticator name is
configured
Step
Enter system view.
1.
Enter interface view.
2.
Configure the local router
3.
to authenticate the
supplicant by using
MS-CHAP or
MS-CHAP-V2.
Command
For local AAA authentication, the
username and password of the
supplicant must be configured on
the authenticator.
For remote AAA authentication,
the username and password of
the supplicant must be
configured on the remote AAA
server.
For more information about AAA
authentication, see Security
Configuration Guide.
Command
system-view
interface interface-type
interface-number
ppp chap user username
ppp chap password { cipher |
simple } password
Command
system-view
interface interface-type
interface-number
ppp authentication-mode
{ ms-chap | ms-chap-v2 }
[ [ call-in ] domain isp-name ]
9
Remarks
The username configured
for the supplicant must be
the same as that
configured on the
supplicant.
The passwords
configured for the
authenticator and
supplicant must be the
same.
Remarks
N/A
N/A
The username you assign to
the supplicant must be the
same as the local username
you assign to the supplicant on
the authenticator.
The password you set for the
supplicant must be the same as
the password you set for the
supplicant on the authenticator.
Remarks
N/A
N/A
By default, PPP authentication
is not performed.