One-Way Chap Authentication Configuration Example - HPE FlexNetwork MSR series Configuration Manual

One-way CHAP authentication configuration example

Network requirements
As shown in
Figure 5 Network diagram
Ser2/1/0
200.1.1.1/16
Router A
Configuration procedure
(Method 1) The authenticator configured with a username authenticates the peer by using
CHAP.
1. Configure Router A:
# Create a user account for Router B.
<RouterA> system-view
[RouterA] local-user userb class network
# Set a password for the user account.
[RouterA-luser-network-userb] password simple hello
# Set the service type of the user account to PPP.
[RouterA-luser-network-userb] service-type ppp
[RouterA-luser-network-userb] quit
# Enable PPP encapsulation on Serial 2/1/0. By default, an interface uses PPP encapsulation.
[RouterA] interface serial 2/1/0
[RouterA-Serial2/1/0] link-protocol ppp
# Configure the username for Router A when Router A authenticates Router B.
[RouterA-Serial2/1/0] ppp chap user usera
# Set the authentication mode to CHAP.
[RouterA-Serial2/1/0] ppp authentication-mode chap domain system
# Assign an IP address to Serial 2/1/0.
[RouterA-Serial2/1/0] ip address 200.1.1.1 16
[RouterA-Serial2/1/0] quit
# Configure local authentication for the PPP users in the default ISP domain (system).
[RouterA] domain system
[RouterA-isp-system] authentication ppp local
2. Configure Router B:
# Create a user account for Router A on Router B.
<RouterB> system-view
[RouterB] local-user usera class network
# Set a password for the user account.
[RouterB-luser-network-usera] password simple hello
# Set the service type of the user account to PPP.
[RouterB-luser-network-usera] service-type ppp
[RouterB-luser-network-usera] quit
# Enable PPP encapsulation on Serial 2/1/0. By default, an interface uses PPP encapsulation.
[RouterB] interface serial 2/1/0
[RouterB-Serial2/1/0] link-protocol ppp
Figure 5, configure Router A to authenticate Router B by using CHAP.
Ser2/1/0
200.1.1.2/16
Router B
30