portal local-server authentication-method

Function

The portal local-server authentication-method command configures the authentication mode for Portal users on the built-in Portal server.

The undo portal local-server authentication-method command restores the default authentication mode for Portal users on the built-in Portal server.

By default, the built-in Portal server uses CHAP to authenticate Portal users.

Format

portal local-server authentication-method { chap | pap }

undo portal local-server authentication-method

Parameters

Parameter	Description	Value
chap	Indicates that the built-in Portal server uses CHAP to authenticate Portal users.	-
pap	Indicates that the built-in Portal server uses PAP to authenticate Portal users.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Password Authentication Protocol (PAP) is a two-way handshake authentication protocol. It transmits passwords in plain text format in RADIUS packets.

Challenge Handshake Authentication Protocol (CHAP) is a three-way handshake authentication protocol. It transmits only user names using RADIUS packets, but does not transmit passwords. CHAP is more secure and reliable than PAP. If high security is required, CHAP is recommended.

Prerequisites

The built-in Portal server function has been enabled globally using the portal local-server command.

Example

# Configure the built-in Portal server to use PAP to authenticate Portal users.

<HUAWEI> system-view
[HUAWEI] portal local-server authentication-method pap