To Next Page

To Previous Page

NOTE: By default, when PAP is enabled on an interface, the interface

expects authenticate-request packets from the peer. However, the

interface can be configured to send authentication request packets to the

peer by configuring PAP to operate in passive mode. In PAP passive mode,

the interface sends the authenticate-request packets to the peer only if

the interface receives the PAP option from the peer during LCP

negotiation—in passive mode, the interface does not authenticate the

peer.

Configuring the PPP Password Authentication Protocol On a Logical Interface

When you configure an interface to use PAP, you must assign an access profile to the

interface. When an interface receives PAP authentication requests, the access profile in

the packet is used to look up the password. If no matching access profile is found for the

PAP authentication request that was received by the interface, the optionally configured

default PAP password is used.

To configure the PPP password authentication protocol, on each logical interface with

PPP encapsulation, perform the following steps.

1. To configure the default PAP password, include the pap-password statement at the

[edit interfaces interface-name unit logical-unit-number ppp-options pap] hierarchy

level:

[edit interfaces interface-name unit logical-unt-number ppp-options pap]

user@host# set default-pap-password password

2. To configure the name the interface uses in PAP request and response packets, include

the local-name statement at the [edit interfaces interface-name unit logical-unt-number

ppp-options pap] hierarchy level:

[edit interfaces interface-name ppp-options pap]

user@host# set local-name name

3. You need to configure the password to be used for authentication. To configure the

host password for sending PAP requests, include the local-password statement at

the [edit interfaces interface-name ppp-options pap] hierarchy level:

[edit interfaces interface-name unit logical-unt-number ppp-options pap]

user@host# set local-password password

NOTE: By default, when PAP is enabled on an interface, the interface uses

the router’s system hostname as the name sent in PAP request and

response packets.

ACX Series Universal Access Router Configuration Guide

Juniper ACX2000 Configuration Guide

Other manuals for Juniper ACX2000