One-Way Chap Authentication Configuration Example - H3C SR6600 Configuration Manual

Reply from 200.1.1.1: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 200.1.1.1: bytes=56 Sequence=3 ttl=255 time=1 ms
Reply from 200.1.1.1: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 200.1.1.1: bytes=56 Sequence=5 ttl=255 time=10 ms
--- 200.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/23/103 ms

One-Way CHAP Authentication Configuration Example

Network requirements
As shown in Figure
Configuration procedure
Approach I: The authenticator configured with a username authenticates the remote end using
CHAP
1) Configure Router A.
# Create a user account for Router B.
<RouterA> system-view
[RouterA] local-user userb
# Set a password for the user account.
[RouterA-luser-userb] password simple hello
# Set the service type of the user account to PPP.
[RouterA-luser-userb] service-type ppp
[RouterA-luser-userb] quit
[RouterA] interface serial 2/0/1
# Enable PPP encapsulation for Serial 2/0/1.
[RouterA-Serial2/0/1] link-protocol ppp
# Configure the username for Router A when Router A authenticates Router B.
[RouterA-Serial2/0/1] ppp chap user usera
# Set the authentication mode to CHAP.
[RouterA-Serial2/0/1] ppp authentication-mode chap domain system
# Assign an IP address to Serial 2/0/1
[RouterA-Serial2/0/1] ip address 200.1.1.1 16
[RouterA-Serial2/0/1] quit
# Create an ISP domain named system.
[RouterA] domain system
# Configure the users in the domain to use the local authentication scheme.
[RouterA-isp-system] authentication ppp local
2) Configure Router B.
# Create a user account for Router A on Router B.
<RouterB> system-view
[RouterB] local-user usera
# Set a password for the user account.
2-5, it is required to authenticate Router B on Router A using CHAP.
2-48