ppp-force-authtype

Function

The ppp-force-authtype command sets the mode of PPP authentication for a PPPoX user in a domain.

The undo ppp-force-authtype command cancels the mode of PPP authentication for a PPPoX user in a domain.

By default, the mode of PPP authentication is not set for a PPPoX user in a domain.

This command is supported only on the NetEngine 8000 F1A.

Format

ppp-force-authtype { chap | mschap_v1 | mschap_v2 | pap }

undo ppp-force-authtype

Parameters

Parameter	Description	Value
chap	Indicates the CHAP mode.	-
mschap_v1	Indicates the MSCHAPv1 mode.	-
mschap_v2	Indicates the MSCHAPv2 mode.	-
pap	Indicates the PAP mode.	-

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

If the mode of PPP authentication is not set for a PPPoX user in a domain, the user is authenticated in the authentication mode specified by the virtual template interface that is bound to the interface. If the mode of PPP authentication is set for a PPPoX user in a domain, the user is authenticated in the authentication mode that has been set.

MSCHAP is the challenge handshake authentication protocol developed by Microsoft. This protocol has two versions, namely, V1 and V2.

When PPP negotiation is disabled, the authentication mode negotiated between the user and VT in the PPP LCP phase must be the same as that configured in the domain. Otherwise, the user authentication fails. When the negotiation is enabled, the authentication mode negotiated by the user and VT in the PPP LCP phase can be different from that configured in the domain. After the second PPP LCP negotiation, the user passes the authentication.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Set the mode of PPP authentication for the PPPoX user in the domain to CHAP.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] ppp-force-authtype chap

# View the mode of PPP authentication for the PPPoX user in the domain.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] ppp-force-authtype chap
[*HUAWEI-aaa-domain-huawei] display domain huawei
......
Force-Auth-Type                 : CHAP
......