Command Manual – User Access
H3C SecPath Series Security Products
Chapter 1 PPP Configuration Commands
1-5
Description
Use the
ppp authentication-mode
command to set the mode that the local PPP uses
to authenticate the peer.
Use the
undo ppp authentication-mode
command to disable authentication.
If you execute the
ppp authentication-mode
{
pap
|
chap
} command without
specifying a domain, the system-default domain or system applies by default, adopting
local authentication and using the address pool in the system domain for address
allocation. You may view the configuration of this default domain with the
display
domain
command.
If a domain is specified, you must configure an address pool in the specified domain.
If a received username includes a domain name, this domain name is used for
authentication (if the name does not exist, authentication is denied). Otherwise, the
domain name configured for PPP authentication applies.
By default, no authentication is performed.
There are two PPP authentication modes:
z
PAP, a two-way handshake authentication, which sends the password in plain
text.
z
CHAP, a three-way handshake authentication, which sends the password in
encrypted text.
In addition, the defined AAA authentication mode list can be used.
Either CHAP or PAP is just an authentication process. The success of the
authentication is decided by AAA, which can authenticate on the basis of the local
authentication database or AAA server.
Related command:
local-user
,
ppp chap user
,
ppp pap local-user
,
ppp pap
password
,
ppp chap password
.
Example
# Set the authentication mode on the interface Virtual-Template1 to PAP to authenticate
the peer.
[H3C-Virtual-Template1] ppp authentication-mode pap
1.1.6 ppp chap password
Syntax
ppp chap password
{
simple
|
cipher
}
password
undo ppp chap password
View
Interface view
