Example: Configuring CHAP Authentication on a PPPoE Interface

This example shows how to configure CHAP on a PPPoE interface.

• Requirements
• Overview
• Configuration

Requirements

Before you begin, configure an Ethernet interface. See Example: Creating an Ethernet Interface.

Overview

In this example, you configure a CHAP access profile, and then apply it to the PPPoE interface pp0. You also configure the hostname to be used in CHAP challenge and response packets, and set the passive option for handling incoming CHAP packets.

Configuration

Step-by-Step Procedure

To configure CHAP on a PPPoE interface:

1. Configure a CHAP access profile.

   [edit]user@host# set access profile A-ppp-client client client1 chap-secret my-secret

2. Configure a PPPoE interface with the CHAP access profile.

   [edit]user@host# set interfaces pp0 unit 0 ppp-options chap access-profile A-ppp-client

3. Configure a hostname for the CHAP challenge and response packets.

   [edit]user@host# set interfaces pp0 unit 0 ppp-options chap local-name A-ge-0/0/1.0

4. Set the passive option to handle incoming CHAP packets only.

   [edit]user@host# set interfaces pp0 unit 0 ppp-options chap passive

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding CHAP Authentication on a PPPoE Interface
• Configuring the PPP Challenge Handshake Authentication Protocol in the Junos Network Interfaces Configuration Guide