No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E-M2 V800R010C10SPC500 Configuration Guide - WAN Access 01

This is NE40E-M2 V800R010C10SPC500 Configuration Guide - WAN Access

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Unidirectional PAP Authentication

Configuring Unidirectional PAP Authentication

The unidirectional PAP authentication configuration procedure involves configuring the authenticator to authenticate the supplicant in PAP mode and configuring the supplicant to be authenticated in PAP mode.

Usage Scenario

In PAP authentication, passwords are sent over a link in simple text. The user name and password of a supplicant can be added to the user list of the authenticator in authentication, authorization and accounting (AAA) mode or sent to a Remote Authentication Dial-In User Service (RADIUS) server for authentication.

In unidirectional PAP authentication, one of two communicating parties functions as the authenticator, whereas the other functions as the supplicant. In bidirectional PAP authentication, two communicating parties function as both the authenticator and supplicant of each other.

This section describes how to configure unidirectional PAP authentication by adding the user name and password of the supplicant to the user list of the authenticator.

Pre-configuration Tasks

Before configuring unidirectional PAP authentication, complete the following tasks:

  • Connect interfaces correctly and configure physical parameters for the interfaces to ensure that the physical layer status of the interfaces is Up.

  • Configure PPP as the link layer protocol of the interfaces.

  • Add the user name and password of the supplicant to the user list of the authenticator in the AAA view.

Configuration Procedures

There are two types of unidirectional PAP authentication: the authenticator authenticating the supplicant in PAP mode and the supplicant being authenticated in PAP mode. You can configure either of the types as required.

Configuring the Authenticator to Authenticate Its Peer in PAP Mode

This section describes how to configure PAP authentication on the authenticator. PAP performs two-way handshake authentication only in the initial link establishment phase.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run aaa

    The AAA view is displayed.

  3. Run local-user user-name password [ cipher password | irreversible-cipher irreversible-cipher-password ]

    The user name and password of the supplicant are added to the local user list.

  4. Run quit

    Return to the system view.

  5. Run interface interface-type interface-number

    The view of the interface of the authenticator is displayed.

  6. Run ppp authentication-mode pap

    The local end is configured to authenticate the peer in PAP mode.

  7. Perform the following steps to restart the interface:
    1. Run the shutdown command to shut down the interface.
    2. Run the commit command to make the configuration take effect.
    3. Run the undo shutdown command to restart the interface.

    NOTE:

    The shutdown, commit, and undo shutdown commands must be run in sequence so that the preceding configuration can take effect after the interface is restarted.

  8. Run commit

    The configuration is committed.

Configuring the Supplicant to Be Authenticated in PAP Mode

This section describes how to configure the supplicant to be authenticated in PAP mode.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The view of the interface on the supplicant is displayed.

  3. Run ppp pap local-user user-name password { cipher password | simple password }

    The interface is configured to send the local user name and password to the authenticator when the local end is authenticated in PAP mode.

  4. Perform the following steps to restart the interface:
    1. Run the shutdown command to shut down the interface.
    2. Run the commit command to make the configuration take effect.
    3. Run the undo shutdown command to restart the interface.

    NOTE:

    The shutdown, and undo shutdown commands must be run in sequence so that the preceding configuration can take effect after the interface is restarted.

  5. Run commit

    The configuration is committed.

Verifying the Unidirectional PAP Authentication Configuration

After configuring unidirectional PAP authentication, you can view the link status and LCP running status of the current interface.

Prerequisites

Unidirectional PAP authentication has been configured.

Procedure

  • Run the display interface [ interface-type [ interface-number ] ] command to check the link status and LCP running status of the current interface.

Example

Run the display interface command. The command output shows that the LCP running status is opened, indicating that authentication is successful.
<HUAWEI> display interface Pos 0/1/0
pos0/1/0 current state : UP (ifindex: 15)
Line protocol current state : UP
Description: HUAWEI, Quidway Series, pos0/1/0 Interface
Route Port,The Maximum Transmit Unit is 1500
Internet Address is 10.110.0.1/24
Link layer protocol is PPP
LCP opened, IPCP opened
Current BW: 100 Mbits
Statistics last cleared:never:
  Last 300 seconds input rate 0 bits/sec, 0 packets/sec 
  Last 300 seconds output rate 0 bits/sec, 0 packets/sec
  Input: 0 packets, 0 bytes
  Input error: 0 shortpacket, 0 longpacket, 0 CRC, 0 lostpacket
  Output: 0 packets, 0 bytes
  Output error: 0 lostpackets
  Output error: 0 overrunpackets, 0 underrunpackets
<HUAWEI> display interface Serial0/0/1/1:0
Serial0/0/1/1:0 current state : UP (ifindex: 305)                         
Line protocol current state : UP                                                
Description:                                                                    
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 20(sec)             
Derived from Cpos0/1/0 e1 1, Timeslot(s) Used: 1-31, baudrate is 1984000 bps    
Internet protocol processing : disabled                                         
Link layer protocol is PPP                                                      
LCP opened, IPCP opened                                                         
Physical layer is Packet Over NO-CRC4                                           
clock master, loopback none                                                     
CRC: CRC-32                                                                     
Scramble disabled                                                               
Current system time: 2013-08-19 20:08:03                                        
Alarm: none                                                                     
Statistics last cleared:2013-08-19 19:53:45                                     
  Traffic statistics:                                                           
    Last 300 seconds input rate 0 bits/sec, 0 packets/sec                       
    Last 300 seconds output rate 0 bits/sec, 0 packets/sec                      
    Input: 0 packets, 0 bytes                                                   
    Input error: 0 shortpackets, 0 longpackets, 0 CRC, 0 lostpackets            
    Output: 0 packets, 0 bytes                                                  
    Output error: 0 lostpackets                                                 
    Output error: 0 overrunpackets, 0 underrunpackets                           
    Last 300 seconds input utility rate:  0.00%                                 
    Last 300 seconds output utility rate: 0.00%                                 
Download
Updated: 2019-01-02

Document ID: EDOC1100058399

Views: 17597

Downloads: 61

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next