HP ProCurve Secure 7102dl, Справочное руководство

Страница: 1133 / 1455

SROS Command Line Interface Reference Guide PPP Interface Configuration Command Set
5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P. 1131
ppp authentication [chap l pap]
Use the ppp authentication command to specify the authentication protocol on the PPP virtual interface
that the peer should use to authenticate itself.
Syntax Description
chap Configures CHAP authentication on the interface.
pap Configures PAP authentication on the interface.
Default Values
By default, PPP endpoints have no authentication configured.
Technology Review
CHAP and PAP are two authentication methods that enjoy widespread support. Both methods are
included in the SROS and are easily configured.
Defining PAP
The Password Authentication Protocol (PAP) is used to verify that the PPP peer is a permitted device by
checking a username and password configured on the peer. The username and password are both sent
unencrypted across the connecting private circuit.
PAP requires two-way message passing. First, the router that is required to be authenticated (say the
peer) sends an authentication request with its username and password to the router requiring
authentication (say the local router). The local router then looks up the username and password in the
username database within the PPP interface, and if they match sends an authentication acknowledge
back to the peer.
Several example scenarios are given below for clarity.
Configuring PAP Example 1: Only the local router requires the peer to authenticate itself.
On the local router (hostname Local):
Local(config-ppp 1)# ppp authentication pap
Local(config-ppp 1)# username farend password same
On the peer (hostname Peer):
Peer(config-ppp 1)# ppp pap sent-username farend password same
Note
The authentication method set up on the local router can be different from that on the peer.
Also, just because one router requires authentication from its peer does not mean it also
has to authenticate itself to the peer.
Note
The PPP username and password database is separate and distinct from the global
username password database. For PAP and CHAP, use the database under the PPP
interface configuration.