Cisco Cisco Packet Data Interworking Function (PDIF) Guida Alla Risoluzione Dei Problemi
APN Configuration Mode Commands
authentication ▀
Cisco ASR 5000 Series Command Line Interface Reference ▄
OL-22948-01
Default: Disabled
Configures the APN to attempt to use the Challenge Handshake Authentication Protocol (CHAP) to
authenticate the subscriber as described in table in Usage section of this command.
A
Configures the APN to attempt to use the Challenge Handshake Authentication Protocol (CHAP) to
authenticate the subscriber as described in table in Usage section of this command.
A
must be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. preference must be an integer from 1 through
1000. The lower the integer, the higher the preference.
1000. The lower the integer, the higher the preference.
Default: Disabled
Configures the APN to attempt to use the Microsoft Challenge Handshake Authentication Protocol
(MSCHAP) to authenticate the subscriber as described in table in Usage section of this command.
A
Configures the APN to attempt to use the Microsoft Challenge Handshake Authentication Protocol
(MSCHAP) to authenticate the subscriber as described in table in Usage section of this command.
A
can be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. preference must be an integer from 1 through
1000. The lower the integer, the higher the preference.
1000. The lower the integer, the higher the preference.
Default: Disabled
Configures the APN to attempt to use the Password Authentication Protocol (PAP) to authenticate the
subscriber as described in table in Usage section of this command.
A
Configures the APN to attempt to use the Password Authentication Protocol (PAP) to authenticate the
subscriber as described in table in Usage section of this command.
A
must be specified in conjunction with this option. Priorities specify which authentication
protocol should be attempted first, second, third and so on. preference must be an integer from 1 through
1000. The lower the integer, the higher the preference.
1000. The lower the integer, the higher the preference.
Usage
Use this command to specify how the APN profile should handle PDP context authentication and what
protocols to use (if any). The ability to configure this option is provided to accommodate the fact that not
every MS will implement the same authentication protocols.
The authentication process varies depending on whether the PDP context is of type IP or PPP. Table given in
this section describes these differences.
For IP PDP contexts, the authentication protocol and values will be passed from the SGSN as Protocol
Configuration Options (PCOs) within the create PDP context PDU to the GGSN. The GGSN requires that the
authentication protocol is specified by this command (with no regard to priority) and will use this information
to authenticate the subscriber.
protocols to use (if any). The ability to configure this option is provided to accommodate the fact that not
every MS will implement the same authentication protocols.
The authentication process varies depending on whether the PDP context is of type IP or PPP. Table given in
this section describes these differences.
For IP PDP contexts, the authentication protocol and values will be passed from the SGSN as Protocol
Configuration Options (PCOs) within the create PDP context PDU to the GGSN. The GGSN requires that the
authentication protocol is specified by this command (with no regard to priority) and will use this information
to authenticate the subscriber.
Table 6. Authentication Process Variances Between PDP Context Type
Authentication
Mechanism
IP PDP Context Behavior
PPP PDP Context Behavior
Allows the session even if the PCOs do not match any
of the configured algorithms.
If the there was no match and the
of the configured algorithms.
If the there was no match and the
parameter
is enabled in the authentication context, the system
attempts to determine a subscriber profile (via PAP with
no password) using the subscriber‘s MSISDN as the
username.
attempts to determine a subscriber profile (via PAP with
no password) using the subscriber‘s MSISDN as the
username.
Allows the session with no authentication algorithm
selected.
If the
selected.
If the
parameter is enabled in the
authentication context, the system attempts to
determine a subscriber profile (via PAP with no
password) using the subscriber‘s MSISDN as the
username.
determine a subscriber profile (via PAP with no
password) using the subscriber‘s MSISDN as the
username.