By default, when PAP is enabled on an interface, the interface always sends authenticate-request packets to the peer, and requires that the peer acknowledge the authenticate-request packets. However, some peer routers may not support bidirectional authentication. In these cases, you can instead configure PAP to operate in passive mode. In passive mode, the router with the PPP link configured for PAP authenticates any incoming connections, but will not require the peer to authenticate its connection.
To configure the interface to authenticate with PAP in passive mode, include the passive statement at the [edit interfaces interface-name ppp-options pap] hierarchy level:
- [edit interfaces interface-name ppp-options pap]