Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010, Configuration Manual

Page: 317 / 774

■
Use to modify the length of the CHAP challenge by specifying the allowable
minimum length and maximum length.
■
Specify the minimum and maximum lengths in bytes in the range 8–63.
CAUTION: Do not decrease the range. Increasing the range is acceptable, provided
that you do not lower the minimum to do so. The recommended minimum is 16. A
longer challenge and a more unpredictable challenge length provide a higher level
of security.
■
The maximum length must be greater than or equal to the minimum length.
■
Example
host1(config-if)# ppp chap-challenge-length 24 28
■
Use the no version to restore the default minimum (16 bytes) and default
maximum (32 bytes).
■
See ppp chap-challenge-length.
ppp max-bad-auth
■
Use to specify the maximum number of authentication retries the router allows
before terminating a PPP session
■
This value applies to PAP and CHAP authentication.
■
The range is 0 – 7. The default is 0, which indicates that no retries are allowed.
■
Example
host1(config-if)# ppp max-bad-auth 3
■
Use the no version to return the number of retries to the default, 0.
■
See ppp max-bad-auth.
PPP Accounting Statistics
The JUNOSe software begins the collection of accounting statistics for terminated
PPP sessions following, but not including, authentication acknowledgement from
the E Series router. The acknowledgment is either a CHAP success or PAP
acknowledgement packet. All subsequent traffic is counted up the point that PPP at
the router terminates the subscriber's session. The statistics are reported in the
following RADIUS attributes:
Attribute Name Attribute Number
Acct-Input-Octets 42
Acct-Output-Octets 43
PPP Accounting Statistics
■ 285
Chapter 8: Configuring Point-to-Point Protocol