[Contents] [Prev] [Next] [Index] [Report an Error]


Assign an Access Profile to an Interface

The CHAP authentication method depends upon a "secret" known only to the authenticator and that peer. The secret is not sent over the link. An access profile is a map between peer names (or "clients") and the secrets associated with their respective links.

When an interface receives CHAP challenges and responses, the value of the access profile is extracted from the packets. This value is the identity of the peer for a specified interface. For information about configuring access profiles and secrets, see the JUNOS Internet Software Configuration Guide: Getting Started.

To assign an access profile to an interface, include the access-profile statement at the [edit interfaces interface-name ppp-options chap] hierarchy level:

[edit interfaces interface-name ppp-options chap]
access-profile name;


access-profile is a mandatory statement of the chap hierarchy. If an interface receives a CHAP challenge or response with a value for name that is not in the named access profile, the link is immediately dropped.


[Contents] [Prev] [Next] [Index] [Report an Error]