Configuring a ppp/mlppp link, Authentication, Ppp link username – Extreme Networks WM-4T1i User Manual

Page 29

Advertising
background image

WM-4T1i Module Installation and User Guide

3-3

Configuring a PPP/MLPPP Link

Configuring a PPP/MLPPP Link

All of the PPP configuration commands can be used to configure a single port or to
configure a multilink group, so the following sections for PPP links also apply to
MLPPP links. To configure a PPP/MLPPP link you will need to choose the
authentication and encapsulation for the link.

If you change the configuration of an enabled PPP or MLPPP link, the changes will not
take effect until the link is restarted. To restart a PPP link, use the following command:

restart ports <portlist>

To restart an MLPPP link, use the following command:

restart multilink <groupname>

Authentication

By default, no authentication is configured on PPP links since the WM-4T1i module will
typically be used with leased lines—where both sides of the link are controlled and
authentification is not required. If authentication is needed, the WM-4T1i module
supports using PAP or CHAP. PPP authentication protocol (PAP) authenticates a user as
the connection is established by sending a username and password. Challenge
Handshake Authentication Protocol (CHAP) authenticates a user by sending a challenge
across the link. The remote end calculates a response based on the user password and
sends the response back across the link. CHAP is a more secure authentication protocol
than PAP. The link can also be configured to attempt to use CHAP first, followed by
PAP, if CHAP fails.

To configure authentication on a PPP link, use the following command:

config ppp authentication [off | chap | pap | chap-pap] [ports

<portlist> | multilink <groupname>]

PPP Link Username

When the local end of a link initiates a PPP connection, the local end must send the
appropriate authentication information. For PAP it sends the username and password,
for CHAP it sends the username and must respond correctly to the challenge, and for
no authentication it sends nothing. To configure the username and password used to
initiate the link, use the following command:

Advertising