Nortel Networks 8000 - Manual (Page 181)

Nortel Secure Router 8000 Series
Configuration -WAN Access 6 PPP and MP configuration
Configuration roadmap
The configuration roadmap is as follows:
1. Configure the local user lists on Router A and Router B.
2. Enable PAP authentication on Router A and Router B.
3. Create MP-group interface and add related interfaces to MP-group.
4. Restart routers to validate the configuration.
Data preparation
To complete the configuration, you need the following data:
# The IP addresses of the Mp-groups on Router A is 111.1.1.1/24
# The IP addresses of the Mp-groups on Router B is 111.1.1.2/24
# The bound sub-tunnel is authenticated by the PAP
OQ NOTE
• The numbering of the Mp-group interfaces of the Secure Router 8000 follows certain limitations.
The slot number and card number must be 0.
• The interfaces added to the MP-group can only be the physical interfaces or the serial interfaces
instead of other interfaces.
• PAP or CHAP authentication is unnecessarily configured when you configure MP binding by using
MP-group.
Configuration procedure
Step 1 Configure Router A.
# Add the username and password of Router B to the local user list of Router A.
<RouterA> system-view
[RouterA] aaa
[RouterA-aaa] local-user rtb password simple rtb
[RouterA-aaa] quit
# Create an Mp-group interface and configure the corresponding interface.
[RouterA] interface mp-group0/0/1
[RouterA-Mp-group0/0/1] ip address 111.1.1.1 255.255.255.0
[RouterA-Mp-group0/0/1] quit
# Configure Serial 1/0/0 to perform the PAP authentication.
[RouterA] interface serial1/0/0
[RouterA-Serial1/0/0] link-protocol ppp
[RouterA-Serial1/0/0] ppp authentication-mode pap
[RouterA-Serial1/0/0] ppp pap local-user rta password simple rta
# Add Serial 1/0/0 to the Mp-group interface.
[RouterA-Serial1/0/0] ppp mp mp-group0/0/1
[RouterA-Serial1/0/0] quit
# Configure Serial 1/0/1 to perform the PAP authentication.
[RouterA] interface serial1/0/1
[RouterA-Serial1/0/1] link-protocol ppp
Issue 5.3 (30 March 2009) Nortel Networks Inc. 6-55