Command Reference Guide

SROS Command Line Interface Reference Guide PPP Interface Configuration Command Set
5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 768
Configuring CHAP Example 1: Only the local router requires the peer to authenticate itself.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username Peer password same
On the peer (hostname Peer):
Peer(config-ppp 1)#username Local password same
The first line of this configuration sets the authentication mode to CHAP. This means the peer is required
to authenticate itself to the local router via CHAP. The second line is the username and password expected
to be sent from the peer. The peer must also have the username up both to verify the incoming username
from the local router and to use the password (along with its hostname) in the response to the local router.
Configuring CHAP Example 2: Both routers require the peer to authenticate itself.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username Peer password same
On the peer (hostname Peer):
Peer(config-ppp 1)#ppp authentication chap
Peer(config-ppp 1)#username Local password same
This is basically identical to Example 1 except that both routers will now challenge each other and
respond.
Configuring CHAP Example 3: Using the ppp chap hostname command as an alternate solution.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username Peer password same
Local(config-ppp 1)#ppp chap hostname nearend
On the peer (hostname Peer):
Peer(config-ppp 1)#username nearend password same
Notice the peer is expecting username “nearend” even though the local router's hostname is “Local".
Therefore the local router can use the ppp chap hostname command to send the correct name on the
challenge.
Configuring CHAP Example 4: Using the ppp chap password command as an alternate solution.
On the local router (hostname Local):
Local(config-ppp 1)#ppp authentication chap
Local(config-ppp 1)#username Peer password different
On the peer (hostname Peer):
Peer(config-ppp 1)#username Local password same
Note
Both ends must have identical passwords.