[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring PAP Authentication Protocol

Configure a PAP access profile, the physical and logical interfaces, and tracing operations for PPP.

For PAP authentication, a username and password for the peer is configured in the access profile, along with a PAP password. Each user can have either a PAP password or a CHAP secret.



[edit access]
profile userlist1;
client {


papuser {
pap-password "#%@^***";  # SECRET-DATA;
}




chapuser {
chap-secret "#%@^***";  # SECRET-DATA;
}


}

To configure the same name for the PAP password and the CHAP secret, configure the client with two different access profiles:



[edit access]
profile chap-profile;
client {


sjcrouter {
chap-secret "#%@^***";  # SECRET-DATA;
}




boston {
chap-secret "#%@^***";  # SECRET-DATA;
}


}
profile pap-profile;
client {


sjcrouter {
pap-password "#%@^***";  # SECRET-DATA;
}




boston {
pap-password "#%@^***";  # SECRET-DATA;
}


}

Configure the physical interface, including the access profile name to be used for PPP authentication:



[edit interfaces so-0/0/0]
ppp-options {


pap {
access-profile “pap-profile”;
local-name "rtrnum1";
local-password "XXXXXXX"; #SECRET-DATA
passive;
}


}

Configure the logical interface, including the default PAP password to be used, should the access profile not be located during authentication:



[edit interfaces so-0/0/0]
encapsulation frame-relay;
unit 0 {
dlci 100;
encapsulation frame-relay-ppp;


ppp-options {


pap {
local-name "rtrnum1";
local-password "XXXXXXX"; #SECRET-DATA
default-pap-password "XXXXX"; #SECRET-DATA
passive;
}


}


}

Include the pap statement to trace PPP protocol operations:



[edit protocols]
ppp {


traceoptions {


flag {
pap;
}


}


}

[Contents] [Prev] [Next] [Index] [Report an Error]