Interface - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Configuring the PPP Password Authentication Protocol On a Logical Interface
498
NOTE: By default, when PAP is enabled on an interface, the interface
expects authenticate-request packets from the peer. However, the
interface can be configured to send authentication request packets to the
peer by configuring PAP to operate in passive mode. In PAP passive mode,
the interface sends the authenticate-request packets to the peer only if
the interface receives the PAP option from the peer during LCP
negotiation—in passive mode, the interface does not authenticate the
peer.
When you configure an interface to use PAP, you must assign an access profile to the
interface. When an interface receives PAP authentication requests, the access profile in
the packet is used to look up the password. If no matching access profile is found for the
PAP authentication request that was received by the interface, the optionally configured
default PAP password is used.
To configure the PPP password authentication protocol, on each logical interface with
PPP encapsulation, perform the following steps.
To configure the default PAP password, include the
1.
[edit interfaces interface-name unit logical-unit-number ppp-options pap]
level:
[edit interfaces interface-name unit logical-unt-number ppp-options pap]
user@host# set default-pap-password password
To configure the name the interface uses in PAP request and response packets, include
2.
the local-name statement at the
hierarchy level:
ppp-options pap]
[edit interfaces interface-name ppp-options pap]
user@host# set local-name name
You need to configure the password to be used for authentication. To configure the
3.
host password for sending PAP requests, include the
the [edit interfaces interface-name ppp-options pap]
[edit interfaces interface-name unit logical-unt-number ppp-options pap]
user@host# set local-password password
NOTE: By default, when PAP is enabled on an interface, the interface uses
the router's system hostname as the name sent in PAP request and
response packets.
pap-password
[edit interfaces interface-name unit logical-unt-number
local-password
hierarchy level:
Copyright © 2017, Juniper Networks, Inc.
statement at the
hierarchy
statement at