Cisco Cisco ASR 5000
APN Configuration Mode Commands
authentication ▀
Command Line Interface Reference, StarOS Release 18 ▄
1305
This option is used in conjunction with allow-noauth. It allows session to get established when PCO contains
both pap and chap in authentication disabled case.
both pap and chap in authentication disabled case.
chap
preference
Default: Disabled
Configures the APN to attempt to use CHAP to authenticate the subscriber as described in the Usage section
of this command.
A
Configures the APN to attempt to use CHAP to authenticate the subscriber as described in the Usage section
of this command.
A
preference
must be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. It must be an integer from 1 through 1000. The
lower the integer, the higher the preference.
lower the integer, the higher the preference.
convert-to-mschap
Default: Disabled
If enabled, the CHAP parameters received with the length of 49 bytes, the AAAmgr converts it to MSCHAP.
If enabled, the CHAP parameters received with the length of 49 bytes, the AAAmgr converts it to MSCHAP.
mschap
preference
Default: Disabled
Configures the APN to attempt to use the Microsoft Challenge Handshake Authentication Protocol
(MSCHAP) to authenticate the subscriber as described in the Usage section of this command.
A
Configures the APN to attempt to use the Microsoft Challenge Handshake Authentication Protocol
(MSCHAP) to authenticate the subscriber as described in the Usage section of this command.
A
preference
can be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. It must be an integer from 1 through 1000. The
lower the integer, the higher the preference.
lower the integer, the higher the preference.
pap
preference
Default: Disabled
Configures the APN to attempt to use PAP to authenticate the subscriber as described in the Usage section of
this command.
A
Configures the APN to attempt to use PAP to authenticate the subscriber as described in the Usage section of
this command.
A
preference
must be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. It must be an integer from 1 through 1000. The
lower the integer, the higher the preference.
lower the integer, the higher the preference.
Usage
Use this command to specify how the APN profile should handle PDP context authentication and what
protocols to use (if any). The ability to configure this option is provided to accommodate the fact that not
every MS will implement the same authentication protocols.
The authentication process varies depending on whether the PDP context is of type IP or PPP. Table given in
this section describes these differences.
For IP PDP contexts, the authentication protocol and values will be passed from the SGSN as Protocol
Configuration Options (PCOs) within the create PDP context PDU to the GGSN. The GGSN requires that the
authentication protocol is specified by this command (with no regard to priority) and will use this information
to authenticate the subscriber.
protocols to use (if any). The ability to configure this option is provided to accommodate the fact that not
every MS will implement the same authentication protocols.
The authentication process varies depending on whether the PDP context is of type IP or PPP. Table given in
this section describes these differences.
For IP PDP contexts, the authentication protocol and values will be passed from the SGSN as Protocol
Configuration Options (PCOs) within the create PDP context PDU to the GGSN. The GGSN requires that the
authentication protocol is specified by this command (with no regard to priority) and will use this information
to authenticate the subscriber.
Table 14. Authentication Process Variances Between PDP Context Type
Authentication
Mechanism
IP PDP Context Behavior
PPP PDP Context Behavior