H3C MSR Series Command Reference Manual page 14

pap: Uses PAP authentication.
call-in: Authenticates the call-in users only. This keyword can be configured when the local end serves as
the receiving end of DDR calls. For more information about DDR, see Layer 2
Configuration Guide.
domain isp-name: Specifies the ISP domain name for authentication, a case-insensitive string of 1 to 24
characters.
Usage guidelines
PPP authentication includes the following categories:
• PAP—Two-way handshake authentication. The password used is in plain text.
CHAP—Three-way handshake authentication. The password is in cipher text.
•
You can configure several authentication modes simultaneously.
In any PPP authentication mode, AAA determines whether a user can pass the authentication through a
local authentication database or an AAA server. For more information about AAA authentication, see
Security Configuration Guide.
If you configure the ppp authentication-mode command with the domain keyword specified, you must
authenticate the peer by using the specified ISP domain and use an address pool associated with this ISP
domain for address allocation (if necessary). You can use the display domain command to display the
domain configuration.
If you configure the ppp authentication-mode command without specifying domain keyword, the system
checks the username for domain information. If the username contains an ISP domain name, this ISP
domain will be used for authentication. If the ISP domain does not exist on the local device, the user's
access request will be denied. If the username does not contain an ISP domain name, the default ISP
domain is used. You can use the domain default command to configure the default ISP domain. If no
default ISP domain is configured, the default ISP domain system is used.
For authentication on a dialup interface, configure authentication on both the physical interface and the
dialer interface. When a physical interface receives a DDR call request, it first initiates PPP negotiation
and authenticates the dial-in user, and then passes the call to the upper layer protocol.
Examples
# Configure interface Serial 2/0 to authenticate the peer by using PAP.
<Sysname> system-view
[Sysname] interface serial 2/0
[Sysname-Serial2/0] ppp authentication-mode pap
# Configure interface Serial 2/0 to authenticate the peer by using PAP and CHAP.
<Sysname> system-view
[Sysname] interface serial 2/0
[Sysname-Serial2/0] ppp authentication-mode pap chap
Related commands
• domain default (Security Command Reference)
local-user (Security Command Reference)
•
• ppp chap password
ppp chap user
•
ppp pap local-user
•
5
WAN Access
—