HPE FlexNetwork MSR series Configuration Manual page 17

Step
To configure the peer:
Step
1. Enter system view.
2. Enter interface view.
3. Configure a username for
the CHAP peer.
4. Set
authentication password.
Configuring MS-CHAP or MS-CHAP-V2 authentication
When you configure MS-CHAP or MS-CHAP-V2 authentication, follow these guidelines:
•
The device can only act as an authenticator for MS-CHAP or MS-CHAP-V2 authentication.
•
L2TP supports only MS-CHAP authentication.
•
MS-CHAP-V2 authentication supports password change only when using RADIUS.
To configure MS-CHAP or MS-CHAP-V2 authentication when the authenticator name is configured:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the authenticator
to authenticate the peer by
using
MS-CHAP-V2.
4. Configure a username for the
MS-CHAP or MS-CHAP-V2
authenticator.
5. Configure local or remote
AAA authentication.
Command
system-view
interface
interface-number
ppp chap user username
the CHAP
ppp chap password { cipher |
simple } string
Command
system-view
interface
interface-number
ppp
{
MS-CHAP or
[ [ call-in ] domain isp-name ]
ppp chap user username
For local AAA authentication, the
username and password of the
peer must be configured on the
authenticator.
Command
username and password of the
peer must be configured on the
remote AAA server.
For more information about AAA
authentication, see
Configuration Guide.
interface-type
interface-type
authentication-mode
ms-chap | ms-chap-v2
8
Remarks
for the authenticator and
peer must be the same.
Security
Remarks
N/A
N/A
The default setting is null.
The username you configure on
the peer must be the same as the
local username you configure for
the peer on the authenticator.
The default setting is null.
The password you set on the peer
must be the same as the
password you set for the peer on
the authenticator.
For security purposes,
password specified in plaintext
form and ciphertext form will be
stored in encrypted form.
Remarks
N/A
N/A
By default, PPP authentication is
}
disabled.
The username
authenticator must be the same
on the local and peer devices.
The username and password of
the peer configured
authenticator or
server must be the same as those
the
for the
on the
remote AAA