H3C Technologies H3C SecPath F1000-E - Manual (Page 52)

8
Follow these steps to configure the authenticatee:
To do… Use the command… Remarks
Enter system view system-view —
Create a VT interface and enter
VT interface view
interface virtual-template number —
Assign a username to the CHAP
authenticatee
ppp chap user username
Required
The username you assign to the
authenticatee must be the same as
the local username you assign to
the authenticatee on the
authenticator.
Set the default CHAP
authentication password ppp chap password { cipher |
simple } password
Required
The password you set for the
authenticatee must be the same as
the password you set for the
authenticatee on the authenticator.
Configuring PPP negotiation
Introduction to PPP negotiation parameters
PPP negotiation parameters that can be configured include:
• Negotiation timeout time
• IP address negotiation
• DNS server address negotiation
1. Negotiation timeout time
Negotiation timeout time determines the interval for sending request packets. During PPP negotiation, if
no response is received from the peer during a specific period after the local device sends a packet, the
device sends the packet again. The period is known as negotiation timeout time, which ranges from 1 to
10 seconds.
2. IP address negotiation
IP address negotiation can be implemented in the following two modes.
• The device operating as the client: You can configure the local interface to operate in this mode if
it uses PPP at the data link layer but does not have an IP address, whereas the peer is configured
with an IP address, after which the interface can receive an IP address allocated by its peer. This
configuration applies to the situations where you access the Internet through ISP.
• The device operating as the server: In this case, you must configure a local IP address pool in
domain view or system view to specify the range of the IP addresses to be allocated, and then bind
the address pool to the interface.
3. DNS address negotiation
PPP address negotiation can also determine the DNS server address. You can configure a device to
allocate the DNS server address to the peer or receive the DNS server address from the peer. Normally,
for a PPP link between a PC and a device, the DNS server address is usually allocated by the device,
through which the PC can access the Internet directly using domain names. For a PPP link established
between a device and the access server of a carrier, the DNS server address is usually allocated by the