HP ProCurve Secure 7102dl, Справочное руководство

Страница: 869 / 1455

SROS Command Line Interface Reference Guide Demand Interface Configuration Command Set
5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P. 867
Several example scenarios are given below for clarity.
Configuring CHAP Example 1: Only the local router requires the peer to authenticate itself.
On the local router (hostname Local):
Local(config-demand 1)# ppp authentication chap
Local(config-demand 1)# username Peer password same
On the peer (hostname Peer):
Peer(config-demand 1)# username Local password same
The first line of this configuration sets the authentication mode to CHAP. This means the peer is required
to authenticate itself to the local router via CHAP. The second line is the username and password
expected to be sent from the peer. The peer must also have the
username up both to verify the incoming
username from the local router and to use the password (along with its hostname) in the response to the
local router.
Configuring CHAP Example 2: Both routers require the peer to authenticate itself.
On the local router (hostname Local):
Local(config-demand 1)# ppp authentication chap
Local(config-demand 1)# username Peer password same
On the peer (hostname Peer):
Peer(config-demand 1)# ppp authentication chap
Peer(config-demand 1)# username Local password same
This is basically identical to Example 1 except that both routers will now challenge each other and
respond.
Configuring CHAP Example 3: Using the ppp chap hostname command as an alternate solution.
On the local router (hostname Local):
Local(config-demand 1)# ppp authentication chap
Local(config-demand 1)# username Peer password same
Local(config-demand 1)# ppp chap hostname nearend
On the peer (hostname Peer):
Peer(config-demand 1)# username nearend password same
Notice the peer is expecting username “nearend” even though the local router's hostname is “Local.”
Therefore the local router can use the
ppp chap hostname command to send the correct name on the
challenge.
Note
Both ends must have identical passwords.