Juniper JUNOSE 11.2, Configuration Manual

Page: 313 / 772

•
Use the no version to specify that the router does not require authentication.
•
See ppp authentication.
ppp chap-challenge-length
•
Use to modify the length of the CHAP challenge by specifying the allowable minimum
length and maximum length.
•
Specify the minimum and maximum lengths in bytes in the range 8–63.
CAUTION: Do not decrease the range. Increasing the range is acceptable, provided that
you do not lower the minimum to do so. The recommended minimum is 16. A longer
challenge and a more unpredictable challenge length provide a higher level of security.
•
The maximum length must be greater than or equal to the minimum length.
•
Example
host1(config-if)# ppp chap-challenge-length 24 28
•
Use the no version to restore the default minimum (16 bytes) and default maximum
(32 bytes).
•
See ppp chap-challenge-length.
ppp max-bad-auth
•
Use to specify the maximum number of authentication retries the router allows before
terminating a PPP session
•
This value applies to PAP and CHAP authentication.
•
The range is 0 – 7. The default is 0, which indicates that no retries are allowed.
•
Example
host1(config-if)# ppp max-bad-auth 3
•
Use the no version to return the number of retries to the default, 0.
•
See ppp max-bad-auth.
PPP Accounting Statistics
The JunosE Software begins the collection of accounting statistics for terminated PPP
sessions following, but not including, authentication acknowledgement from the E Series
router. The acknowledgment is either a CHAP success or PAP acknowledgement packet.
All subsequent traffic is counted up the point that PPP at the router terminates the
subscriber's session. The statistics are reported in the following RADIUS attributes:
Attribute Name Attribute Number
Acct-Input-Octets 42
281 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Point-to-Point Protocol