Lucent Technologies 6000 User Manual

Page of 586
4-68
MAX 6000/3000 Network Configuration Guide
Configuring Individual WAN Connections
Configuring bidirectional CHAP support
Mike1-out  User-Password="ascend" Service-Type=Outbound-User,
           User-Name="Mike1",
           Framed-Protocol=PPP,
           Framed-IP-Address=111.5.1.1,
           Framed-IP-Netmask=255.255.255.0,
           Ascend-Dial-Number=90492386067,
           Ascend-Data-Svc=Switched-64K,
           Ascend-Send-Auth=Send-Auth-CHAP,
           Ascend-Send-Secret="passout",
           Ascend-Receive-Secret="passin",
           Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
           Ascend-Route-IP=1
route-tnt-pat-1 User-Password="ascend", Service-Type=Outbound-User
                Framed-Route="111.5.1.0/30 111.5.1.1 1 n Mike1-out"
Setting up selective bidirectional CHAP with callback
To configure bidirectional CHAP with callback, proceed as follows:
Create a first-tier pseudo-user profile.
Create a second-tier user profile.
In the first-tier pseudo-user profile, proceed as follows:
1
Set the User-Name parameter to the name of the called party, and User-Password to 
ascend
.
2
Set the Ascend-Require-Auth parameter to Require-Auth.
3
Set the Ascend-Send-Auth parameter to Send-Auth-CHAP.
4
Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or 
Bi-Directional-Auth-Required.
In the second-tier user profile, proceed as follows:
1
Set the Ascend-Send-Auth parameter to Send-Auth-CHAP.
2
Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or 
Bi-Directional-Auth-Required.
3
Set the Ascend-Callback parameter to Callback-Yes.
For a global bidirectional CHAP callback, the first-tier pseudo-user profile must be 
suppressed. The following example shows the configuration required for callback. In the 
first-tier pseudo-user profile, bidirectional authentication is selectively determined during 
DNIS pre-authentication, and the system performs bidirectional authentication for both 
incoming and outgoing calls. The second-tier user profile is configured for bidirectional CHAP 
with callback.
8940      User-Password="Ascend-DNIS", Service-Type=Outbound-User
          Ascend-Require-Auth=Require-Auth,
          Ascend-Auth-Type=Auth-CHAP,
          Ascend-Send-Auth=Send-Auth-CHAP,
          Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required
Mike1_cb   User-Password="passin", Service-Type=Framed-User,
           Ascend-Send-Secret="pass",
           Framed-Protocol=MP,