170CHAPTER 12: CONFIGURING PPP AND MP

Whether the PPP user passes the authentication will be finally decided by AAA, which can authenticate PPP user at local or at RADIUS server.

Local authentication is to authenticate the local user configured through the local-useruser password { simple cipher } password command, and RADIUS server authentication is to authenticate using the user database on RADIUS server. The specific configuration commands are shown in the following table.

Table 199 Configure AAA authentication and accounting of PPP

Operation

Command

 

 

Enable AAA

aaa-enable

 

 

Configure PPP authentication method of AAA

aaa authentication ppp {

 

default list-name } [

 

method1 method2 ...... ]

 

 

Configure the local first authentication of AAA

aaa authentication local-first

 

 

Configure PPP authentication method of AAA at

ppp authentication-mode { chap

the interface

pap } [ default list-name ]

 

 

For PPP authentication method of AAA, refer to Security. If PPP authentication method of AAA is not specified on the interface, please use the default authentication method.

4Configure PPP Negotiation Parameter

The following PPP negotiation parameters can be configured:

Time interval between negotiation timeout

During PPP negotiation, if the response packet of the peer is not received within this time interval, PPP will retransmit the packet. The default time interval of timeout is 10s, and the value range is 1~10s.

Some negotiation parameters of NCP

For the configuration of local IP address and the IP address assigned to the peer, refer to Network Protocol. For example, if it is necessary for the remote end to allocate an IP address for the local end, you can use the ip address ppp-negotiatecommand, while the remote address command can be used to designate the local to assign IP address for the peer.

Table 200 Configure the time interval of PPP negotiation timeout

Operation

Command

 

 

Configure the time interval of negotiation timeout

ppp timer negotiate

 

seconds

 

 

Restore the default of time interval of negotiation

undo ppp timer negotiate

timeout

 

 

 

5Configure PPP Compression

The current the 3Com Router version supports the Stac compression method. Perform the following task in the interface view.

Table 201 Configure PPP compression

Operation

Command

 

 

Configure as Stac compression permitted on the

ppp compression stac-lzs

interface

 

 

 

Cancel the Stac compression used by the interface

undo ppp compression

 

stac-lzs

 

 

Page 174
Image 174
3Com 10014299 Configure AAA authentication and accounting of PPP, Configure the time interval of PPP negotiation timeout