HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual page 672

Using the Web Browser Interface for Basic Configuration Tasks
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
14-50
Status Information
Status information is displayed at the bottom of the Configuration PPP
window. After you apply your changes, the PPP Link State will be "starting,"
indicating that the ProCurve Secure Router OS is trying to establish a PPP
connection with its peer. Ensure that the PPP Link State is eventually "up."
For information about troubleshooting PPP, see "Troubleshooting the PPP
Interface" on page 6-58.
PPP Authentication
The ProCurve Secure Router supports to authentication protocols for PPP:
Password Authentication Protocol (PAP) and Challenge Handshake Authen-
tication Protocol (CHAP).
When a ProCurve Secure Router asks a peer to authenticate itself using PAP,
the peer sends its password in clear text over the wire. The first router matches
the password to the password in its PPP database.
CHAP is more secure becomes the actual password does not cross the wire,
where anyone could intercept it. The peer that is authenticating itself hashes
its password and sends the hash value to the challenging peer instead. The
challenger, who has the password stored in its PPP database, performs the
same hash function. It compares the result with the value it received from
the peer.
Both peers must use the same protocol.
You can configure the ProCurve Secure Router to require authentication from
a peer, or to authenticate itself to a peer, or both.
Requiring a Peer to Authenticate Itself to the Local Router
1. Select Physical Interfaces under System in the left navigation bar.
2. Choose the logical interface for the connection whose remote endpoint
you want to authenticate. (It must, of course, be a PPP interface.)
3. You will enter the PPP Config window. Move to Authentication Settings
in the PPP configuration for "ppp <interface number>" window.