Configuring Authentication And Encryption; Configuring Windows 2000 Server To Support Chap Authentication - 3Com OfficeConnect Remote 812 Cli User's Manual

6-10 C 6: M
HAPTER ANUAL
Configuring
Authentication and
Encryption
S
ETUP
To learn how to use CLI commands to configure authentication and encryption for
the OCR 812, please refer to the following:
To configure authentication parameters, see


[ANY | ANY_EXCEPT_MSCHAP | CHAP | MSCHAPV1 | MSCHAPV2 | NONE |
PAP].
To configure a Windows 2000 Server for CHAP authentication, see


Windows 2000 Server to Support CHAP
To configure MPPE encryption, see


name>encryption_algorithm [AUTO | MICROSOFT_128BIT | MICROSOFT_40BIT
| MICROSOFT_56BIT | NONE |
To set up MPPE, note that you must also configure the OCR 812 to use the


MSCHAPv1 authentication protocol.
To configure the OCR 812 to use MSCHAPv1, enter the
receive_authentication [ANY | ANY_EXCEPT_MSCHAP | CHAP | MSCHAPV1
| MSCHAPV2 | NONE | PAP]
To learn more about MPPE, please visit the Microsoft corporate web site at


www.microsoft.com.
To configure a Windows 2000 Server for L2TP encryption, see


Windows 2000 Server to Support Encryption for L2TP
To configure a Cisco Router for L2TP encryption, see


Router to Support Encryption for L2TP

Configuring Windows 2000 Server to Support CHAP Authentication

Microsoft supports CHAP authentication for both PPTP and L2TP tunnels.
However, to configure CHAP authentication for a Windows 2000 Server, you must
ensure that store pw using reversible encryption for all users in domain is
set to enabled before adding users.
If you add users before you enable store pw using reversible encryption for all
users in domain, you must enable the option and then re-enter the passwords
for all users in the domain.
To Configure authentication for your Windows 2000 Server.
1 Set up the Windows 2000 Server with IP address 123.45.67.89.
2 Add the authentication protocols you wish to use. See
more information.
To configure CHAP authentication for your Windows 2000 Server, set store pw
using reversible encryption for all users in domain to enable, as follows:
a Select Programs->Administrative Tools->Local Security Policy.
b Select Security Settings\Account Policies\Password Policy.
3 When prompted, enter the password secret.
4 Add all users for the domain.
set ppp receive_authentication
Authentication.
set tunnel <tunnel_
REQUIRED].
command and specify the MSCHAPv1 option.
Configuring a Cisco
Tunnels.
Authentication Options
Configuring
set ppp
Configuring
Tunnels.
for