Cisco Cisco Packet Data Interworking Function (PDIF) Guida Alla Risoluzione Dei Problemi
LNS Service Configuration Mode Commands
▀ authentication
▄ Cisco ASR 5000 Series Command Line Interface Reference
OL-22947-02
must be an integer from 1 through 1000. The lower the integer, the higher the preference.
PAP is enabled by default as the second highest preference.
Default: Disabled
This option configures the LNS to attempt to authenticate the PPP session based on the Mobile Station
Identity (MSID).
This option configures the LNS to attempt to authenticate the PPP session based on the Mobile Station
Identity (MSID).
Usage
Use to specify how the LNS service should handle authentication and what protocols to use. The flexibility is
given to configure this option to accommodate the fact that not every mobile will implement the same
authentication protocols.
The chassis is shipped from the factory with the LNS authentication options set as follows:
given to configure this option to accommodate the fact that not every mobile will implement the same
authentication protocols.
The chassis is shipped from the factory with the LNS authentication options set as follows:
allow-noauth disabled
chap enabled with a priority of 1
mschap disabled
msid-auth disabled
pap enabled with a priority of 2
Important:
At least one of the keywords must be used to complete the command.
Example
The following command configures the LNS service to allow no authentication for PPP sessions and would perform
accounting using the default NAI-construct of username@domain:
The following command configures the LNS service to allow no authentication for PPP sessions and would perform
accounting using the default NAI-construct of username@domain:
The following command configures the system to attempt authentication first using CHAP, then MSCHAP, and finally
PAP. If the allow-noauth command was also issued, when all attempts to authenticate the subscriber using these
protocols failed, then the subscriber would be allowed access:
PAP. If the allow-noauth command was also issued, when all attempts to authenticate the subscriber using these
protocols failed, then the subscriber would be allowed access: