4-68 MAX 6000/3000 Network Configuration Guide
Configuring Individual WAN Connections
Configuring bidirectional CHAP support
Mike1-out User-Password="ascend" Service-Type=Outbound-User,
User-Name="Mike1",
Framed-Protocol=PPP,
Framed-IP-Address=111.5.1.1,
Framed-IP-Netmask=255.255.255.0,
Ascend-Dial-Number=90492386067,
Ascend-Data-Svc=Switched-64K,
Ascend-Send-Auth=Send-Auth-CHAP,
Ascend-Send-Secret="passout",
Ascend-Receive-Secret="passin",
Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
Ascend-Route-IP=1
route-tnt-pat-1 User-Password="ascend", Service-Type=Outbound-User
Framed-Route="111.5.1.0/30 111.5.1.1 1 n Mike1-out"
Setting up selective bidirectional CHAP with callback
To configure bidirectional CHAP with callback, proceed as follows:
Create a first-tier pseudo-user profile.
Create a second-tier user profile.
In the first-tier pseudo-user profile, proceed as follows:
1Set the User-Name parameter to the name of the called party, and User-Password to
ascend.
2Set the Ascend-Require-Auth parameter to Require-Auth.
3Set the Ascend-Send-Auth paramet er to Send-Auth-CHAP.
4Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or
Bi-Directional-Auth-Required.
In the second-tier user profile, proceed as follows:
1Set the Ascend-Send-Auth paramet er to Send-Auth-CHAP.
2Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or
Bi-Directional-Auth-Required.
3Set the Ascend-Callback parameter to Callback-Yes.
For a global bidirectional CHAP callback, the first-tier pseudo-user profile must be
suppressed. The following example shows the configuration required for callback. In the
first-tier pseudo-user profile, bidirectional authentication is selectively determined during
DNIS pre-authentication, and the system performs bidirectional authentication for both
incoming and outgoing calls. The second-tier user profile is configured for bidirectional CHAP
with callback.
8940 User-Password="Ascend-DNIS", Service-Type=Outbound-User
Ascend-Require-Auth=Require-Auth,
Ascend-Auth-Type=Auth-CHAP,
Ascend-Send-Auth=Send-Auth-CHAP,
Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
Mike1_cb User-Password="passin", Service-Type=Framed-User,
Ascend-Send-Secret="pass",
Framed-Protocol=MP,