ppp ms-chap refuse
To refuse Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) authentication from peers
requesting it, use the
ppp ms-chap refuse
command in interface configuration mode. To allow MS-CHAP
authentication, use the
no
form of this command.
ppp ms-chap refuse
no ppp ms-chap refuse
Syntax Description
This command has no keywords or arguments.
Command Default
MS-CHAP authentication is disabled.
Command Modes
Interface configuration
Command History
Modification
Release
This command was introduced.
Release 3.9.0
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task
IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator
for assistance.
The
ppp ms-chap refuse
command specifies that MS-CHAP authentication is disabled for all calls, meaning
that all attempts by the peer to force the user to authenticate using MS-CHAP are refused.
If outbound Password Authentication Protocol (PAP) has been configured (using the
ppp authentication
command), PAP is suggested as the authentication method in the refusal packet.
Task ID
Operations
Task ID
read, write
ppp
Examples
This example shows how to specify POS interface 0/3/0/1 and disable MS-CHAP authentication from occurring
if a peer calls in requesting MS-CHAP authentication. The method of encapsulation on the interface is PPP.
RP/0/RSP0/CPU0:router#
configure
RP/0/RSP0/CPU0:router(config)#
interface POS 0/3/0/1
RP/0/RSP0/CPU0:router(config-if)#
encapsulation ppp
RP/0/RSP0/CPU0:router(config-if)#
ppp ms-chap refuse
Cisco ASR 9000 Series Aggregation Services Router Interface and Hardware Component Command Reference,
Release 5.3.x
741
PPP Commands onthe Cisco ASR 9000 Series Router
ppp ms-chap refuse