H3C SecPath F1020 Configuration Guide

5
LCP negotiation succeeds. If the response packet from the peer carries a recommended
authentication mode, the authenticator directly uses the authentication mode if it finds the mode
configured.
Configuring PAP authentication
Restrictions and guidelines for PAP authentication
For local AAA authentication, the username and password of the peer must be configured on the
authenticator.
For remote AAA authentication, the username and password of the peer must be configured on the
remote AAA server.
The username and password configured for the peer must be the same as those configured on the
peer by using the
ppp pap local-user command.
Configuring the authenticator
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Configure the authenticator to authenticate the peer by using PAP.
ppp authentication-mode pap [ [ call-in ] domain { isp-name | default
enable isp-name } ]
By default, PPP authentication is disabled.
4. Configure local or remote AAA authentication.
For more information about AAA authentication, see Security Configuration Guide.
Configuring the peer
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Configure the PAP username and password sent from the peer to the authenticator when the
peer is authenticated by the authenticator by using PAP.
ppp pap local-user username password { cipher | simple } string
By default, when being authenticated by the authenticator by using PAP, the peer sends null
username and password to the authenticator.
For security purposes, the password specified in plaintext form and ciphertext form will be
stored in encrypted form.
Configuring CHAP authentication (authenticator name is
configured)
Restrictions and guidelines for CHAP authentication (authenticator name is configured)
When you configure the authenticator, follow these guidelines:
• For local AAA authentication, the username and password of the peer must be configured on
the authenticator.

H3C SecPath F1020 Specifications

General

Brand	H3C
Model	SecPath F1020
Category	Firewall
Language	English