6-13
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
Configuring the Logical Interface
Figure 6-4. CHAP Process
When you configure CHAP on the ProCurve Secure Router, you only need to
set the password. The router automatically sends the hostname for the user-
name and computes the hash value.
Requiring a Peer to Authenticate Itself. When you configure PPP
authentication on the ProCurve Secure Router, you must first choose whether
you want to use PAP or CHAP. To require authentication, you must:
■ enable PAP or CHAP on the connection
■ set the peer’s username and password
You configure authentication for an individual PPP connection. Move to the
logical interface for the connection and specify the type of authentication:
Syntax: ppp authentication [chap | pap]
For example, if you want to use CHAP for the PPP 1 interface, enter:
ProCurve(config-ppp 1)# ppp authentication chap
Note Both sides of the connection do not have to require authentication. However,
if both sides require authentication, they must use the same protocol. If your
peer requires authentication, you must set the username and password the
router will send. (These are distinct from the username and password that the
router accepts.) See “Setting a PAP Username and Password” on page 6-14
and “Setting a CHAP Username and Password” on page 6-15.
Calculate
hash
Challenge
1
Peer
2
Compares
hash values
Hash
3
Acknowledge
4
Authenticator
Calculate
hash
To Next Page
Loading...
Need help?
General
