Chapter 35 Configuring The Pppoe Client - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring the PPPoE Client Username and Password
PPPoE is not supported when failover is configured on the security appliance, or in multiple context or
Note
transparent mode. PPPoE is only supported in single, routed mode, without failover.
Configuring the PPPoE Client Username and Password
To configure the username and password used to authenticate the security appliance to the access
concentrator, use the vpdn command. To use the vpdn command, you first define a VPDN group and
then create individual users within the group.
To configure a PPPoE username and password, perform the following steps:
Step 1 Define the VPDN group to be used for PPPoE using the following command:
hostname(config)# vpdn group group_name request dialout pppoe
In this command, replace group_name with a descriptive name for the group, such as "pppoe-sbc."
If your ISP requires authentication, select an authentication protocol by entering the following
Step 2
command:
hostname(config)# vpdn group group_name ppp authentication {chap
Replace group_name with the same group name you defined in the previous step. Enter the appropriate
keyword for the type of authentication used by your ISP:
•
•
•
Note
Associate the username assigned by your ISP to the VPDN group by entering the following command:
Step 3
hostname(config)# vpdn group group_name localname username
Replace group_name with the VPDN group name and username with the username assigned by your ISP.
Step 4 Create a username and password pair for the PPPoE connection by entering the following command:
hostname(config)# vpdn username username password password [store-local]
Replace username with the username and password with the password assigned by your ISP.
Note
Cisco Security Appliance Command Line Configuration Guide
35-2
CHAP—Challenge Handshake Authentication Protocol
MS-CHAP—Microsoft Challenge Handshake Authentication Protocol Version 1
PAP—Password Authentication Protocol
When using CHAP or MS-CHAP, the username may be referred to as the remote system name,
while the password may be referred to as the CHAP secret.
The store-local option stores the username and password in a special location of NVRAM on
the security appliance. If an Auto Update Server sends a clear config command to the security
appliance and the connection is then interrupted, the security appliance can read the username
and password from NVRAM and re-authenticate to the Access Concentrator.
Chapter 35 Configuring the PPPoE Client
| | }
mschap pap
OL-10088-01