5
LCP negotiation succeeds. If the response packet from the peer carries a recommended
authentication mode, the authenticator directly uses the authentication mode if it finds the mode
configured.
Configuring PAP authentication
Restrictions and guidelines for PAP authentication
For local AAA authentication, the username and password of the peer must be configured on the
authenticator.
For remote AAA authentication, the username and password of the peer must be configured on the
remote AAA server.
The username and password configured for the peer must be the same as those configured on the
peer by using the
ppp
pap local-user
command.
Configuring the authenticator
1.
Enter system view.
system-view
2.
Enter interface view.
interface interface-type interface-number
3.
Configure the authenticator to authenticate the peer by using PAP.
ppp
authentication-mode
pap
[
[
call-in
]
domain
{
isp-name
|
default
enable
isp-name
}
]
By default, PPP authentication is disabled.
4.
Configure local or remote AAA authentication.
For more information about AAA authentication, see
Security Configuration Guide
.
Configuring the peer
1.
Enter system view.
system-view
2.
Enter interface view.
interface interface-type interface-number
3.
Configure the PAP username and password sent from the peer to the authenticator when the
peer is authenticated by the authenticator by using PAP.
ppp
pap local-user username
password
{
cipher
|
simple
}
string
By default, when being authenticated by the authenticator by using PAP, the peer sends null
username and password to the authenticator.
For security purposes, the password specified in plaintext form and ciphertext form will be
stored in encrypted form.
Configuring CHAP authentication (authenticator name is
configured)
Restrictions and guidelines for CHAP authentication (authenticator name is configured)
When you configure the authenticator, follow these guidelines:
•
For local AAA authentication, the username and password of the peer must be configured on
the authenticator.