H3C SecPath F5030 Configuration Manual page 26

•
For remote AAA authentication, the username and password of the peer must be configured on
the remote AAA server.
•
The username and password configured for the peer must meet the following requirements:
The username configured for the peer must be the same as that configured on the peer by
using the ppp chap user command.
The passwords configured for the authenticator and peer must be the same.
When you configure the peer, follow these guidelines:
•
For local AAA authentication, the username and password of the authenticator must be
configured on the peer.
•
For remote AAA authentication, the username and password of the authenticator must be
configured on the remote AAA server.
•
The username and password configured for the authenticator must meet the following
requirements:
The username configured for the authenticator must be the same as that configured on the
authenticator by using the ppp chap user command.
The passwords configured for the authenticator and peer must be the same.
•
The peer does not support the CHAP authentication password configured by using the ppp
chap password command. CHAP authentication (authenticator name is configured) will
apply even if the authentication name is configured.
Configuring the authenticator
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Configure the authenticator to authenticate the peer by using CHAP.
ppp authentication-mode chap [ [ call-in ] domain { isp-name | default
enable isp-name } ]
By default, PPP authentication is disabled.
4. Configure a username for the CHAP authenticator.
ppp chap user username
The default setting is null.
5. Configure local or remote AAA authentication.
For more information about AAA authentication, see Security Configuration Guide.
Configuring the peer
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Configure a username for the CHAP peer.
ppp chap user username
The default setting is null.
4. Configure local or remote AAA authentication.
For more information about AAA authentication, see Security Configuration Guide.
6