Command Reference Guide

244 ● ppp authentication-mode 3Com Router 5000 Family and Router 6000 Family
Command Reference
ppp authentication-mode
Purpose Use the ppp authentication-mode command to set the mode that the local PPP
uses to authenticate the peer router.
Use the undo ppp authentication-mode command to disable authentication.
Syntax ppp authentication-mode { chap | pap } [call-in | domain isp-name ]
undo ppp authentication-mode
Parameters chap, pap
Authentication mode. You must specify either option,
but not both of them.
call-in
Authenticates the peer only when a call from a remote
user is received.
domain
Domain name in user authentication.
Default By default, no authentication is performed.
Example Authenticate the peer router by means of PAP on interface Serial 0/0/0.
[3Com-Serial0/0/0] ppp authentication-mode pap domain system
View This command can be used in the following views:
■ Interface view
■ Virtual-Template Interface view
Description If you configure the ppp authentication-mode { pap | chap } command without
specifying a domain, the system-default domain named system applies by default,
adopting local authentication and using the address pool you configured for this
domain for address allocation.
If a domain is specified, you must configure an address pool in the specified domain.
If a received username includes a domain name, this domain name is used for
authentication (if the name does not exist, authentication is denied). Otherwise, the
domain name configured for PPP authentication applies.
If the username does not include a domain name, and the domain name configured
for PPP authentication does not exist, authentication is denied also.
There are two PPP authentication algorithms:
■ PAP is a two-way handshake authentication
■ CHAP is a three-way handshake authentication