Configuring CHAP on a PPPoE Interface (Optional)

You can configure interfaces with PPPoE encapsulation to support the PPP Challenge Handshake Authentication Protocol (CHAP). When you enable CHAP on an interface, the interface can authenticate its peer and be authenticated by its peer.

In this example, you configure a CHAP access profile, and then apply it to the PPPoE interface pp0. You also configure the hostname to be used in CHAP challenge and response packets, and set the passive option for handling incoming CHAP packets.

You can use either J-Web or the CLI configuration editor to configure CHAP on a PPPoE interface.

This topic covers:

• J-Web Configuration
• CLI Configuration

J-Web Configuration

To configure a CHAP access profile:

1. Select Configuration>View and Edit>Edit Configuration.
2. Next to Access, click Configure or Edit.
3. Next to Profile, click Add new entry.
4. In the Profile name box, type A-ppp-client.
5. Next to Client, click Add new entry.
6. In the Name box, type client1.
7. In the Chap secret box, type my-secret.
8. Click OK until you return to the main Configuration page.

To configure a PPPoE interface with the CHAP access profile:

1. On the main Configuration page next to Interfaces, click Configure or Edit.
2. In the Interface name box, click pp0.
3. In the Interface unit number box, click 0.
4. Next to Ppp options, click Configure.
5. Next to Chap, click Configure.
6. In the Access profile box, type A-ppp-client.

To configure a hostname for the CHAP challenge and response packets:

1. In the Local name box, type A-ge-0/0/1.0.

To set the passive option to handle incoming CHAP packets only:

1. In the Passive box, click Yes.
2. Click OK.

CLI Configuration

To configure a CHAP access profile:

To configure a PPPoE interface with the CHAP access profile:

To configure a hostname for the CHAP challenge and response packets:

To set the passive option to handle incoming CHAP packets only: