Lucent Technologies 6000 - Manual (Page 198)

4-66 MAX 6000/3000 Network Configuration Guide
Configuring Individual WAN Connections
Configuring bidirectional CHAP support
16 Exit the profile and, at the exit prompt, select the exit and accept option.
Setting up bidirectional CHAP on the MAX unit for outgoing calls
To set up bidirectional CHAP on the MAX unit for outgoing calls, proceed as follows:
1 Open the dialout Connections > PPP Options subprofile.
2 Set the Send Auth parameter to CHAP, MS-CHAP, or Cache-Token. If you specify any
other mode, bidirectional authentication does not take place, even if Bi-Dir Auth is set to
Allowed or Required.
3 Set the Bi-Dir Auth parameter to Required or Allowed. Required specifies that
bidirectional authentication must be carried out or the call is dropped. Allowed specifies
that authentication can be bidirectional. The MAX unit identifies the called device, and
the called device can identify the MAX unit, but the called device need not do so for the
call to be accepted.
4 Set the Send PW parameter to a text string specifying the password sent to the called
device during the authentication initiated by the MAX unit.
5 Set the Recv PW parameter to a text string specifying the password sent by the called unit
during the authentication initiated by the called unit.
6 Set the Recv Name parameter to a text string. The MAX compares the called party’s name
against the value you specify. If the called party’s name is different, the MAX tears down
the call. If you do not specify a value for Recv Name, the called party’s name is compared
against the dialout profile name.
7 Exit the profile and, at the exit prompt, select the exit and accept option.
Setting alternative name for CHAP authentication
For incoming and outgoing calls, the MAX unit uses CHAP authentication. The MAX unit
uses the system name (System > Sys Config > Name) during CHAP authentication.
Alternatively, you can set the Send Name parameter, in Ethernet Answer > PPP Options, to
specify a name to be used during CHAP authentication. If you set the Send Name parameter,
the MAX ignores the value of the System > Sys Config > Name parameter.
Configuring bidirectional CHAP in RADIUS
The following sections describe how to configure bidirectional CHAP in RADIUS. You can
use one of the following configurations:
• Setting up bidirectional CHAP for incoming calls
• Setting up bidirectional CHAP for outgoing calls
• Setting up selective bidirectional CHAP with callback
• Setting up bidirectional CHAP for double RADIUS lookups in multiprovider networks
Setting up bidirectional CHAP in RADIUS for incoming calls
You can configure selective bidirectional authentication by using CLID or DNIS
pre-authentication in a pseudo-user profile, and then specifying two passwords in the user
profile.