HP ProCurve 7000dl Series Basic Management And Configuration Manual page 309

N o t e
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
Authenticator
1
Calculate
2
hash
Compares
3
hash values
4
Figure 6-4. CHAP Process
When you configure CHAP on the ProCurve Secure Router, you only need to
set the password. The router automatically sends the hostname for the user-
name and computes the hash value.
Requiring a Peer to Authenticate Itself. When you configure PPP
authentication on the ProCurve Secure Router, you must first choose whether
you want to use PAP or CHAP. To require authentication, you must:
enable PAP or CHAP on the connection
set the peer's username and password
You configure authentication for an individual PPP connection. Move to the
logical interface for the connection and specify the type of authentication:
Syntax: ppp authentication [chap | pap]
For example, if you want to use CHAP for the PPP 1 interface, enter:
ProCurve(config-ppp 1)# ppp authentication chap
Both sides of the connection do not have to require authentication. However,
if both sides require authentication, they must use the same protocol. If your
peer requires authentication, you must set the username and password the
router will send. (These are distinct from the username and password that the
router accepts.) See "Setting a PAP Username and Password" on page 6-14
and "Setting a CHAP Username and Password" on page 6-15.
Configuring the Logical Interface
Challenge
Hash
Acknowledge
Peer
Calculate
hash
6-13