< Home

Configuring PAP Authentication

This section describes how to configure Password Authentication Protocol (PAP) authentication. PAP uses simple passwords.

Prerequisites

A FW functions as an authenticator and uses PAP to authenticate its peer. PAP authentication is performed locally on the authenticator or on a remote authentication server. To implement PAP authentication, configure user accounts and the authentication mode. If remote authentication is used, configure an authentication server as well.

Context

PAP uses simple passwords and is the least secure authentication protocol. After a PPP link is established, the device to be authenticated repeatedly sends a user name and a password until authentication is complete. During PAP authentication, the transmitted user name and password are susceptible to monitoring.

By default, PPP packets are not authenticated.

Procedure

  • Configure an authenticator to authenticate the peer end in PAP mode.
    1. Display the system view.

      system-view
    2. Display the interface view.

      interface interface-type interface-number
    3. Configure the local end to authenticate its peer end in PAP mode.

      ppp authentication-mode [ chap ] pap

      The ppp authentication-mode chap pap command enables CHAP negotiation to take precedence over PAP negotiation during LCP negotiation. If the authenticator supports neither of these two modes, negotiation fails.

  • Configure the peer end to perform PAP authentication.
    1. Display the system view.

      system-view
    2. Display the interface view.

      interface interface-type interface-number
    3. Enable the local end to be authenticated by the peer end in PAP mode and send a PAP user name and a password.

      ppp pap local-user user-name password cipher password
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >