[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring CHAP on Dialer Interfaces (Optional)

You can optionally configure dialer interfaces to support the PPP Challenge Handshake Authentication Protocol (CHAP). CHAP is a server-driven, three-step authentication method that depends on a shared secret password residing on both the server and the client. When you enable CHAP on a dialer interface, the Services Router can authenticate its peer and be authenticated by its peer.

For more information about CHAP, see the JUNOS Network Interfaces Configuration Guide.

To configure CHAP on the dialer interface:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 86.
  3. If you are finished configuring the router, commit the configuration.

Table 86: Configuring CHAP on Dialer Interfaces

Task

J-Web Configuration Editor

CLI Configuration Editor

Define a CHAP access profile—for example, usb-modem-access-profile with a client (username) named usb-modem-user and the secret (password) my-secret.
  1. On the main Configuration page next to Access, click Configure or Edit.
  2. Next to Profile, click Add new entry.
  3. In the Profile name box, type usb-modem-access-profile.
  4. Next to Client, click Add new entry.
  5. In the Name box, type usb-modem-user.
  6. In the Chap secret box, type my-secret.
  7. Click OK until you return to the main Configuration page.

From the [edit] hierarchy level, enter

set access profile usb-modem-access-profile client usb-modem-user chap-secret my-secret

Navigate to the appropriate dialer interface level in the configuration hierarchy—for example, dl0 unit 0.
  1. On the main Configuration page next to Interfaces, click Configure or Edit.
  2. In the interface name box, click dl0.
  3. In the Interface unit number box, click 0.

From the [edit] hierarchy level, enter

edit interfaces dl0 unit 0

Configure CHAP on the dialer interface and specify a unique profile name containing a client list and access parameters—for example, usb-modem-access-profile.
  1. Next to Ppp options, click Configure.
  2. Next to Chap, click Configure.
  3. In the Access profile box, type usb-modem-access-profile.
  4. Click OK.

Enter

set ppp-options chap access-profile usb-modem-access-profile

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]