Cisco ASR 900 Series Configuration Manual page 121

PPP and Multilink PPP Configuration
Command or Action
Step 3
interface serial number
Example:
Router(config)# interface serial 0/0/0
Step 4 ppp authentication {chap | chap pap | pap
chap | pap} [if-needed] [list-name | default]
[callin]
Example:
Router(config-if)# ppp authentication
chap
Step 5 ppp use-tacacs [single-line]or aaa
authentication ppp
Example:
Router(config-if)# ppp use-tacacs
single-line
Router(config-if)# aaa authentication ppp
Step 6 exit
Example:
Router(config-if)# exit
Step 7 username name [user-maxlinks link-number]
password secret
Example:
Router(config)# username name
user-maxlinks 1 password password1
Step 8 end
Example:
Router(config)# end
Purpose
Enters Interface Configuration mode.
Defines the authentication methods supported and the order in which
they are used.
Note
Configure TACACS on a specific interface as an alternative to global
host authentication.
Exits interface configuration mode.
Configures identification.
• Optionally, you can specify the maximum number of
• To use the user-maxlinks keyword, you must also use the aaa
Exits global configuration mode and enters privileged EXEC mode.
Caution
Time Division Multiplexing Configuration Guide, Cisco IOS XE Fuji 16.7.x (Cisco ASR 900 Series)
Enabling CHAP or PAP Authentication
• Use the ppp authentication chap command only with
TACACS or extended TACACS.
• With AAA configured on the router and list names
defined for AAA, the list-name optional argument can
be used with AAA/TACACS+. Use the ppp use-tacacs
command with TACACS and Extended TACACS. Use
the aaa authentication ppp command with
AAA/TACACS+.
connections a user can establish.
authorization network default local command and PPP
encapsulation and name authentication on all the interfaces the
user will be accessing.
If you use a list name that has not been configured with
the aaa authentication ppp command, you disable PPP
on the line.
113