3Com OfficeConnect Remote 812 A VPN tunnel can only be configured for MSCHAPv1 by using the CLI

B-32APPENDIX B: CLI COMMAND DESCRIPTION

server_type	Type of network service you wish to assign to this administration
	name. Currently available services are:
	TELNETD - TELNET server
	HTML - for gathering statistics
	SNMPD - SNMP agent
	TFTPD - server for file transfers
socket	Indicates which “socket” the server listens on. For TFTP and
	TELNET, it is the TCP or UDP port number.
data	TELNET Ancillary Data. This field contains server-specific
	configuration data. See table which lists the configurable ancillary
	data parameters.
close_active_connections	Indicates whether or not to close any active connections when a
	service is disabled by the disable network_service command.

set ppp receive_authentication [ANY

ANY_EXCEPT_MSCHAP CHAP MSCHAPV1 MSCHAPV2 NONE PAP]

Sets the type of inbound authentication to be used when establishing PPP connections for PPTP and L2TP tunnels.

For in-depth information about CHAP and PAP, see RFC 1334.

A VPN tunnel can only be configured for MSCHAPv1 by using the CLI

set ppp command (MSCHAPv1 cannot be configured via the OCR 812 web interface).

To use PPTP with CHAP for a VPN established between the OCR 812 and a Windows 2000 Server, you must ensure that store pw using reversible encryption for all users in domain is set to enabled before adding VPN users. For more information, see Configuring Windows 2000 Server to Support CHAP Authentication.

Authentication Options

Parameter	Description
ANY	The default. Use whatever type of authentication is requested.
ANY_EXCEPT_MSCHAP	Use any type of authentication except Microsoft Challenge
	Handshake Authorization Protocol version 1.
CHAP	Use Challenge Handshake Authorization Protocol.
MSCHAPv1	Use Microsoft Challenge Handshake Authorization Protocol
	version 1. Note that you must enter the set tunnel command at the
	CLI prompt and specify both a user name and a password.
MSCHAPv2	Use Microsoft Challenge Handshake Authorization Protocol
	version 2. Note that you must enter the set tunnel command at the
	CLI prompt and specify both a user name and a password.
NONE	Don’t check for authentication.
PAP	Use Password Authentication Protocol.