Configuring PPP Authentication
The following sections describe configuring PPP authentications for two situations:
v Configuring the 2210 to authenticate a remote device.
v Configuring the 2210 to be authenticated by a remote device.
These two situations are independent. You can do one or the other.
Configuring a PPP Interface to Authenticate a Remote Device
To authenticate a remote device or dial-in client:
1. Enable authentication on the PPP interface
v At the Config> prompt, enter the network command to select the PPP
interface to configure.
v At the PPP Config> prompt, enable the authentication protocol you want to
use.
You can use any of the following protocols:
–PAP
– MS-CHAP
Note: MS-CHAP can use the PPP local database to authenticate, but
cannot use an authentication server.
– CHAP
–SPAP
Note: SPAP is only available on interfaces that have IBM DIALs Dial-In
circuits configured.
2. Decide whether to authenticate locally or through an authentication server.
v To authenticate locally, enter the name and password into the PPP user
database.
At the Config> prompt, use the add ppp_user command. See “Add” on
page 52 for more information.
A 2210 maintains a single PPP user database. When the remote router or
device sends its name and password to the device during the authentication
phase, the device checks to see if that name and password are in the PPP
user database.
v To authenticate through an authentication server using TACACS, TACACS+,
or RADIUS, you must configure the device to reach the authentication server
and the name and password must be in the server’s database. Refer to
“Using Local or Remote Authentication” in
Using and Configuring Features
.
Configuring a PPP Interface to be Authenticated by a Remote
Device
To configure the device to be authenticated by a remote device or dial-in client,
configure the device’s name and password:
1. At the Config> prompt, select the interface you are configuring using the
network command.
2. At the PPP Config> prompt, type the set name command and provide the name
and password that the device will use to identify itself to the remote router or
device during the authentication phase.
Using PPP
458
MRS V3.2 Software User’s Guide
|
|
||