Configure PPP 169
Table 197 Configure the local authenticates the peer in CHAP mode
b Configure the requester of CHAP authentication
Perform the following configuration in the interface view, and use the
local-user command in the system view.
Table 198 Configure as the peer authenticates the local in CHAP mode
Generally, when the router configures user list, it configures the command ppp
chap user username
and local-user user password { simple | cipher }
password
, to perform CHAP authentication. While configuring CHAP
authentication, user of one end is the username of the other, and the password
must be the same.
In some situation, if the router cannot configure user list then it needs to
configure the command p
pp chap password { simple | cipher }
password to perform CHAP authentication.
While configuring CHAP authentication, note the following:
■ If one side originates the CHAP, authenticator should add username and
password for the requester in the local database (use
local-user
command), and should send its username to the requester (use ppp chap
user
command). The requester should also add username and password
for the authenticator in its database (use
local-user command), and send
its username and password to the authenticator (use
ppp chap user
command).
■ If one side originates the CHAP, authenticator only needs to start CHAP
authentication itself (use
ppp authentication-mode chap command). The
requester does not need to configure the command.
■ If both sides originate CHAP simultaneously, then each side is both
authenticator and requester. At this time, both sides need to configure all
the commands supporting the CHAP authentication.
3 Configure AAA Authentication and Accounting Parameter of PPP
Operation Command
Enable CHAP authentication ppp authentication-mode chap [
call-in ] [ scheme { default |
name-list }]
Disable CHAP authentication undo ppp authentication-mode
Configure the name of the local ppp chap user username
Delete the configured name of the local undo ppp chap user
Add the username and password of the peer
into the local user list
local-user user password {
simple | cipher } password
Operation Command
Configure the name of the local ppp chap user username
Delete the configured name of the local undo ppp chap user
Configure the password of the local for
authentication in CHAP mode
ppp chap password { simple |
cipher } password
Delete the password of the local during
authentication in CHAP mode
undo ppp chap password
Add the username and password of the peer
into the local user list
local-user user password {
simple | cipher } password