Operation Manual - Link Layer Protocol
H3C SecPath F1800-A Firewall
Chapter 2 PPP Configuration
4-15
2.2.4 Configuring PPP Authentication Mode of AAA
After PPP authentication, whether the PPP user passes the authentication will be
finally decided by AAA.
AAA can authenticate the PPP user:
z
At local
z
Through the RADIUS server
z
Through the TACACS server
z
Local authentication is to authenticate the PPP user based on the information on
the local user configured with the
local-user
user-name
password
{
simple
|
cipher
}
password
command.
z
RADIUS or TACACS server authentication is to authenticate the PPP user
based on the information on the user database on the RADIUS or TACACS
server.
Table 2-8
Configuring AAA authentication and accounting of PPP
Action
Command
Apply the PPP authentication mode
of the AAA authentication scheme.
ppp authentication-mode
{
chap
[
pap
] |
pap
} [
call-in
]
For PPP authentication method of AAA, refer to the
"06-Security Defence Operation"
module in this manual.
After the above configuration, basic PPP configuration is completed. You can
configure the following advanced configuration as required.
2.2.5 Setting PPP Negotiation Parameters
The following PPP negotiation parameters can be set.
z
Interval between negotiation timeout
During PPP negotiation, if the response message of the peer is not received within
this interval, PPP will resend the former message. The interval of timeout ranges from
1 to 10 seconds.
z
Some negotiation parameters of NCP
They include the local IP address, or the IP address assigned to the peer.
For example, use the
ip address ppp-negotiate
command to require the peer to
assign IP address for the local; use the
remote address
command to make the local
device to assign IP address for the peer.
For these configurations, refer to the
"05-Network and Routing Protocol Operation"
part in this manual.
Do as follows in interface view.
