IBM SC30-3681-08 manual Conguring PPP Authentication

Using PPP

Con®guring PPP Authentication

The following sections describe con®guring PPP authentications for two situations: v Con®guring the 2210 to authenticate a remote device.

v Con®guring the 2210 to be authenticated by a remote device. These two situations are independent. You can do one or the other.

Con®guring a PPP Interface to Authenticate a Remote Device

To authenticate a remote device or dial-in client:
1. Enable authentication on the PPP interface
v At the Config> prompt, enter the network command to select the PPP
interface to con®gure.
v At the PPP Config> prompt, enable the authentication protocol you want to
use.
You can use any of the following protocols:
±	PAP
±	MS-CHAP
	Note: MS-CHAP can use the PPP local database to authenticate, but
	cannot use an authentication server.

±CHAP

±SPAP

Note: SPAP is only available on interfaces that have IBM DIALs Dial-In circuits con®gured.

2.Decide whether to authenticate locally or through an authentication server. v To authenticate locally, enter the name and password into the PPP user

database.

At the Config> prompt, use the add ppp_user command. See ªAddº on page 52 for more information.

A 2210 maintains a single PPP user database. When the remote router or device sends its name and password to the device during the authentication phase, the device checks to see if that name and password are in the PPP user database.

vTo authenticate through an authentication server using TACACS, TACACS+, or RADIUS, you must con®gure the device to reach the authentication server and the name and password must be in the server's database. Refer to ªUsing Local or Remote Authenticationº inUsing and Con®guring Features.

Con®guring a PPP Interface to be Authenticated by a Remote

Device

To con®gure the device to be authenticated by a remote device or dial-in client, con®gure the device's name and password:

1.At the Config> prompt, select the interface you are con®guring using the network command.

2.At the PPP Config> prompt, type the set name command and provide the name and password that the device will use to identify itself to the remote router or device during the authentication phase.

458MRS V3.2 Software User's Guide