2.5 Configuring Unidirectional CHAP
This section describes how to configure unidirectional CHAP authentication. Detailed
operations include configuring the authenticator with a user name to authenticate the peer in
CHAP mode and configuring the authenticator without a user name to authenticate the peer in
CHAP mode.
2.5.1 Establishing the Configuration Task
Before configuring unidirectional CHAP authentication, familiarize yourself with the applicable
environment, complete the pre-configuration tasks, and obtain the required data. This can help
you complete the configuration task quickly and accurately.
Applicable Environment
In CHAP authentication, passwords are sent over the link in encrypted text. The username and
password of the authenticated can be authenticated in AAA mode or through the RADIUS server
and then added into the user list of the authenticator.
CHAP authentication is classified into the following types:
l Unidirectional: One of two communication parties functions as the authenticator, while the
other as the authenticated.
l Bidirectional: Two communication parties function as both the authenticator and the
authenticated.
This section describes how to configure unidirectional CHAP authentication.
Pre-configuration Tasks
Before configuring CHAP authentication, complete the following tasks:
l Connecting interfaces and configuring physical attributes for these interfaces to ensure that
the physical layer of the interfaces is Up
l Configuring PPP as the link layer protocol of interfaces
Data Preparation
To configure CHAP authentication, you need the following data.
No.
Data
1 Number of the interface
2 (Optional) Username of the authenticator
3 Username and password of the authenticated
Quidway S9300 Terabit Routing Switch
Configuration Guide - WAN Access 2 PPP Configuration
Issue 02 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
25