User manual

Nortel Secure Router 8000 Series
Configuration -WAN Access 6 PPP and MP configuration
Issue 5.3 (
30 March 2009) Nortel Networks Inc. 6-55
Configuration roadmap
The configuration roadmap is as follows:
1. Configure the local user lists on Router A and Router B.
2. Enable PAP authentication on Router A and Router B.
3. Create MP-group interface and add related interfaces to MP-group.
4. Restart routers to validate the configuration.
Data preparation
To complete the configuration, you need the following data:
z
The IP addresses of the Mp-groups on Router A is 111.1.1.1/24
z
The IP addresses of the Mp-groups on Router B is 111.1.1.2/24
z
The bound sub-tunnel is authenticated by the PAP
NOTE
z
The numbering of the Mp-group interfaces of the Secure Router 8000 follows certain limitations.
The slot number and card number must be 0.
z
The interfaces added to the MP-group can only be the physical interfaces or the serial interfaces
instead of other interfaces.
z
PAP or CHAP authentication is unnecessarily configured when you configure MP binding by using
MP-group.
Configuration procedure
Step 1 Configure Router A.
# Add the username and password of Router B to the local user list of Router A.
<RouterA> system-view
[RouterA] aaa
[RouterA-aaa] local-user rtb password simple rtb
[RouterA-aaa] quit
# Create an Mp-group interface and configure the corresponding interface.
[RouterA] interface mp-group0/0/1
[RouterA-Mp-group0/0/1] ip address 111.1.1.1 255.255.255.0
[RouterA-Mp-group0/0/1] quit
# Configure Serial 1/0/0 to perform the PAP authentication.
[RouterA] interface serial1/0/0
[RouterA-Serial1/0/0] link-protocol ppp
[RouterA-Serial1/0/0] ppp authentication-mode pap
[RouterA-Serial1/0/0] ppp pap local-user rta password simple rta
# Add Serial 1/0/0 to the Mp-group interface.
[RouterA-Serial1/0/0] ppp mp mp-group0/0/1
[RouterA-Serial1/0/0] quit
# Configure Serial 1/0/1 to perform the PAP authentication.
[RouterA] interface serial1/0/1
[RouterA-Serial1/0/1] link-protocol ppp