Table Of Contents

PPP Commands

CHAP Authentication

PAP Authentication

set ppp address negotiation local

set ppp authentication

set ppp authentication accept

set ppp bacp

set ppp callback

ppp chapallow multihost

set ppp chaprefuse

set ppp clientname

set ppp magicnumbercheck

set ppp multilink

set ppp negotiation count

set ppp negotiation integrity

set ppp negotiation retry

set ppp ip netmask local

set ppp password

set ppp tas

set ppp tas chapsecret local

set ppp tas client

set ppp termreq count

show negotiation

PPP Commands

---

This chapter describes the commands to configure Point-to-Point Protocol (PPP) parameters, such as call negotiation and authentication.

You can use Point-to-Point Protocol (PPP) with Challenge Handshake Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for security and authentication. CHAP and PAP, used with PPP encapsulation (the only encapsulation method used by the Cisco 700 series router), allow routers to authenticate incoming calls. The set ppp authentication command is used to choose the type of authentication, CHAP, PAP or none.

CHAP Authentication

With CHAP, a remote device attempting to connect to the router is requested, or challenged, to respond to the router authentication request. This works both ways. When another device attempts to call the Cisco 700 series router, CHAP information is verified. When the Cisco 700 series router calls another device and is challenged, CHAP information is sent to the challenger.

When a router receives the challenge response, it verifies the response by looking up the user name of the remote device in the list of profiles and verifying the passwords or secrets, which must be identical on the remote device and the local router. In the Cisco IOS-700 software, CHAP passwords are referred to as secrets because they are encrypted when they are stored; passwords are stored in plain text.

In the following example, router 2503 is allowed to call the local router using the password cisco7:

Host> cd 2503  
Host:2305> set ppp authentication CHAP 
Host:2305> set ppp secret cisco7 
Host:2305> set ppp clientname 2503

PAP Authentication

Like CHAP, PAP is an authentication protocol used with PPP. However, PAP is less secure. CHAP passes an encrypted version of the password on the physical link, but PAP passes the password and username in clear text.

The username allows a router to verify a username in a profile before the device can call in to the router. In the following example, username 2503 is allowed to call in to the router if it uses the password cisco7:

Host> cd 2503  
Host:2305> set ppp authentication PAP 
Host:2305> set remote access  
Host:2305> set ppp password  
Enter new Password: cisco7

Re-Type new Password: cisco7

Enter User Name: 2503 

set ppp address negotiation local

To force the dynamically negotiated IP address to be assigned to the user-defined profile, use the set ppp address negotiation local command.

SEt PPp Address NEgotiation LOcal ON | OFf

Syntax Description

ON	Enable address negotiation.
OFf	Disable address negotiation.

Default

Off

Command Mode

System or profile mode

Usage Guidelines

The set ppp address negotiation local on command forces the IP address used for PPP Internet Protocol Control Protocol (IPCP) negotiation to be assigned to the Standard profile or a user-defined profile instead of the Internal profile.

By default, the router first attempts to assign the IPCP negotiated address to the Internal profile. If the Internal profile already has an IP address, the router places the address in a user-defined profile.

It is recommended that this feature be on when the network access server assigns the IP address; specifically, it should be enabled when the LAN profile or the Internal profile is already set up for IP routing.

Example

The following example uses the IP address configured for a user-defined profile named ISP for PPP negotiation. The router first requests that the IP address configured in the ISP profile be assigned to the router. The address in the access server response is assigned to the ISP profile, not the permanent Internal profile.

765> cd ISP 

765:ISP> set ppp address negotiation local on 

When a call is made and IP address negotiation has occurred, the ISP assigns an IP address to the router. To verify the IP address, you can use the show ip config all command.

Related Commands

set dhcp server
set ip pat
set ip routing
show ip config
show negotiation

set ppp authentication

To set the PPP authentication for incoming and outgoing ISDN calls, use the set ppp authentication command.

SEt PPp AUthentication INcoming | OUtgoing [CHap] [PAp] [NOne]

INcoming	Apply the authentication method to the incoming challenge.
OUtgoing	Send a PPP challenge.
CHap	Enable Challenge Handshake Authentication Protocol (CHAP). You must have a CHAP host password configured with the set ppp secret command and a user ID configured with the set system name command or the set ppp clientname command at the profile level.
PAp	Enable Password Authentication Protocol (PAP). You must have a PAP host password configured with the set ppp password command and a user ID configured with the set system name command in system mode or the set ppp clientname command in profile mode.
NOne	No authentication is performed.

Syntax Description

Defaults

incoming chap pap
outgoing none

Command Mode

System or profile mode

Usage Guidelines

Authentication depends on the direction of the challenge (as opposed to the direction of the call). The router attempts to authenticate an incoming challenge when the incoming parameter is set for this command. The router sends a challenge when the outgoing parameter is set for this command.

You can specify one, two, or all of the authentication options. They are negotiated in the following order: CHAP, PAP, none. If the none keyword is not specified and authentication fails, the call is terminated.

This command does not affect how the router responds to remote authentication requests. The router always responds to PAP or CHAP authentication requests.

A client password must be configured with the set ppp password or set ppp secret command to make the authentication response succeed (unless a null password is used by the peer).

The authentication sequence is not required for leased-line connections. To set up a leased-line configuration, authentication should be disabled and a user-defined profile named leasedline (the name is not case sensitive) must be created or another user-defined profile must be renamed. If the leasedline profile is not present upon call connect, the router requires authentication to select the correct profile. If the call cannot be authenticated, the call is dropped.

Within the leasedline profile, verify that PPP authentication is set to none (the default) by using the show security command. The switch types that support this feature are PERM64 and PERM128.

The set ppp authentication incoming command works in system mode only. The set ppp authentication outgoing command works in system mode and profile mode. Whatever is set in system mode becomes the default setting for each profile. The outgoing authentication method applies to outgoing WAN calls, and provides users with the option of 2-way authentication. In other words, when acting as a remote router dialing into an access server, not only is the router authenticated by the access server, it can authenticate the access server using the set ppp authentication outgoing command.

Examples

The following example sets the router to use incoming PAP authentication:

Host> set ppp authentication incoming pap

The following example disables PPP authentication for outgoing calls:

Host:leasedline> set ppp authentication outgoing none

Related Command

set ppp clientname
set ppp secret
set systemname

set ppp authentication accept

To specify a preferred authentication protocol, use the set ppp authentication accept command.

SEt PPp AUthentication ACcept [CHap | PAp] | [EIther]

Syntax Description

ACcept	The Cisco 700 series router is the device being authenticated.
CHap	CHAP is the preferred authentication protocol.
PAp	PAP is the preferred authentication protocol.
EIther	Either CHAP or PAP can be used for authentication.

Default

Accept either

Command Mode

System or profile mode

Usage Guidelines

Cisco access servers require a specific authentication protocol to communicate with each type of dial-in device. For example, analog modem dial-in devices are authenticated by using PAP, and ISDN routers are authenticated by using CHAP.

By default, the Cisco access server proposes PAP in its line-control protocol configuration request. The Cisco 700 series router rejects PAP and waits for the Cisco access server to propose CHAP. When CHAP is proposed, the router proceeds with the authentication phase.

Cisco 700 series router software Release 4.2(2) solves the problem of a PAP proposal rejection and includes the flexibility of a fall-back order. You can specify a preference for a particular protocol. However, if the access server requires a protocol other than the preferred protocol, the router accepts it.

This command cannot be used with the set ppp chaprefuse command because the parameter specifies that CHAP must be refused.

To set a preferred order of authentication for incoming calls, use the set ppp authentication accept command in system mode.

Examples

The following example accepts CHAP only:

Host> set ppp authentication accept chap 

The following example accepts PAP only:

Host> set ppp authentication accept pap 

The following example accepts either protocol, with a preference for CHAP:

Host> set ppp authentication accept chap either 

The following example accepts either protocol, with a preference for PAP:

Host> set ppp authentication accept pap either 

The following example accepts either protocol, with no preference:

Host> set ppp authentication accept either

Related Command

set ppp authentication
show security

set ppp bacp

To enable Bandwidth Allocation Control Protocol (BACP), use the set ppp bacp command.

SEt PPp BAcp ON | OFf

Syntax Description

ON	Enable BACP negotiation.
OFf	Disable BACP negotiation.

Default

On

Command Mode

System or profile model

Usage Guidelines

The set ppp bacp command defines a set of rules to control dynamic bandwidth allocation gracefully by managing the number of links in a multilink PPP bundle. Bandwidth Allocation Protocol (BAP) defines a set of request and response messages to manage the links. BACP consists of a network control program that negotiates once per multilink PPP bundle.

The router supports dynamic management of both B channels with the demand feature. The implementation of BACP and BAP allows the router to coordinate and negotiate the actual allocation and deallocation of the second channel.

Add a Link

After BACP has been negotiated, demand traffic triggers a BAP negotiation to bring up the second link of a bundle. Auto mode has to be enabled for the second link for the router to start BAP call or callback request negotiation; otherwise, it can only participate in BAP negotiation initiated by its peer.

The router endorses an incoming BAP call or callback request to add a link if the second B channel is available and the call for the second link is in the same direction as the call for the first link.

When requesting the addition of the second link, the router sends a BAP call or callback request to its peer, depending on the direction of the call for the first link.

For a callback request, the router also checks if the set PPP callback reply command is set to on.

Integration with the set auto Command

The set auto command on the second link turns demand dialing on, while the set ppp bacp command identifies if BACP/BAP is negotiated for a multilink PPP bundle.

The following are descriptions of the operation for the four combinations:

•If set ppp bacp on and set 2 auto on commands are entered, the BOD algorithm monitors traffic and sends BAP call/callback request messages to the peer. Incoming BAP call/callback request messages from the peer are processed.

•If set ppp bacp on and set 2 auto off commands are entered, the BOD algorithm does not initiate an addition of the second link, but the incoming BAP call/callback request messages from the peer are processed.

•If set ppp bacp off and set 2 auto on commands are entered, there is no BACP negotiation when the network control protocol is up. The BOD algorithm only monitors traffic and brings up the second link; it does not send a BAP message to the peer.

•If set ppp bacp off and set 2 auto off commands are entered, there is no BACP negotiation when the network control protocol is up. The BOD algorithm does not initiate addition of the second link. The router cannot add a link automatically.

Drop a Link

A link drop is attempted locally when network traffic changes or a resource conflict (for example, call bumping) arises. This can be achieved with or without BAP negotiation. Timeout mode must be enabled for the second link for the router to start BAP link drop request negotiation.

You might want to release a B channel without excessive delay. The resource has to be freed to answer an incoming voice call. In this case, no BAP negotiation is done; PPP tries to tear down the link immediately.

If negotiation is selected and the peer does not respond to a BAP link-drop request before the response timer expires, BAP retries according to the PPP negotiations settings.

Integration with the set timeout Command

The set timeout command on the second link determines whether the BOD algorithm can tear down the second link based on traffic while the set ppp bacp command determines whether BACP/BAP is negotiated for a multilink PPP bundle.

The following are operation descriptions for the four combinations:

•If set ppp bacp on and set 2 timeout on commands are entered, the BOD algorithm monitors traffic and sends a BAP link-drop request message to the peer when the condition of dropping a link is met. The incoming BAP link drop request message from the peer is acknowledged and the link is always torn down.

•If set ppp bacp on and set 2 timeout off commands are entered, the BOD algorithm does not initiate the second link disconnection; however, the incoming BAP link-drop request message from the peer is acknowledged.

•If set ppp bacp off and set 2 timeout on commands are entered, there is no BACP negotiation when the network control protocol is up. The BOD algorithm monitors traffic and tears down the second link without sending a BAP link-drop request to the peer.

•If set ppp bacp off and set 2 timeout off commands are entered, there is no BACP negotiation when the network control protocol is up. The BOD algorithm does not initiate the second link disconnection. The router cannot drop the link automatically.

BACP is only implemented on BRI interfaces. Multilink PPP protocol has to be enabled for the BACP to be functional.

Related Commands

demand
set auto
set ppp callback
set ppp negotiation count
set ppp negotiation retry
set ringback
set timeout
show negotiation

set ppp callback

To set the callback mode for point-to-point encapsulation, use the set ppp callback command. This command ensures a level of callback security.

SEt PPP CAllback REquest | REply ON | OFf | ALways

Syntax Description

REquest	Request a callback when the router places a call.
REply	Agree to a callback when requested to do so by a remote router.
ON	Enable callback.
OFf	Disable callback.
ALways	Force callback at all times.

Default

Off (disabled)

Command Mode

Profile mode

Usage Guidelines

When the calling unit's request is set to on, the calling unit initiates a callback request. If the callback request is acknowledged by the called unit, the call stays connected until one of the following occurs:

•The call is disconnected by the called unit, and another callback is made by the called unit.

•The callback is acknowledged by the called unit, but the callback is not attempted by the called unit. This could happen if the called unit callback reply is set to off for that profile or the called unit is a product that does not support callback.

•If the calling unit request is set to always, the calling unit disconnects the call after the acknowledgment process. If the called unit reply is set to on or always, the called unit makes a callback to the calling unit.

•If the called unit reply is set to always, the called unit disconnects the original call. The called unit attempts a callback.

Example

The following example sets the profile to reply always:

Host> set ppp callback reply always

Related Commands

set number
set ppp bacp
set ringback
set security
show security

ppp chapallow multihost

To receive CHAP challenges from hosts with different host names, use the set ppp chapallow multihost command.

SEt PPp CHAPAllow MUltihost ON | Off

Syntax Description

ON	Receives CHAP challenges with different host names.
Off	Rejects CHAP challenges with different host names.

Default

Off

Command Mode

System mode

Usage Guidelines

This command should not be set to ON unless the CHAP challenges received by the router contain different host names and you do not consider this to be a security risk.

Example

The following command sets the router to accept and respond to CHAP challenges from multiple hosts:

host> set ppp chapallow multihost on

Related Commands

show security
set ppp chaprefuse

set ppp chaprefuse

To set a CHAP filter to authenticate the remote device for CHAP security purposes, use the set ppp chaprefuse command.

SEt PPp CHaprefuse ALl | NOne | [INcall] [REsponsefirst] [SAmehost] [DIrectionwrong]

Syntax Description

ALl	Refuse to authenticate CHAP.
NOne	Clear the current filter.
INcall	Refuse to authenticate incoming CHAP challenges.
REsponsefirst	Ignore the challenge if the remote device has not sent a valid response to a previous challenge sent by the Cisco 700 series router.
SAmehost	Ignore the challenge if the hostname field matches the hostname field of the Cisco 700 series router.
DIrectionwrong	Ignore the challenge if the caller indicates that the call was originated by the Cisco 700 series router.

Default

None

Command Mode

System mode

Usage Guidelines

To avoid a race condition when using two Cisco 700 series routers to authenticate CHAP, set the responsefirst filter on only one router.

Example

The following example sets a filter for common security protection:

Host> set ppp chaprefuse responsefirst samehost directionwrong

Related Commands

set password
set ppp authentication
set ppp authentication accept
show security

set ppp clientname

To set different usernames and passwords within the profiles, use the set ppp clientname command.

SEt PPp CLientname clientname

Syntax Description

clientname

Identification for the profile.

Default

No PPP client name

Command Mode

System or profile mode

Usage Guidelines

Remote users might have multiple service providers. The set ppp clientname command allows profiles to have different usernames. If the client name is not set in profile mode or system mode, a profile uses the system name configured with the set systemname command when dialing out. Each profile can also have its own password or secret set by using the set ppp password or the set ppp secret command.

Setting the PPP client name, PAP password, and CHAP secret in system mode establishes the default values for the profile mode. These values are used if no other values are specified at the profile level.

Related Commands

set password
set ppp authentication
set ppp authentication accept
show security
show users

set ppp magicnumbercheck

To enable and disable the checking of the magic numbers received in the link control protocol echo request and echo reply packets against the magic number negotiated with the peer router, use the set ppp magicnumbercheck command.

SEt PPp MAgicnumbercheck ON | OFf

Syntax Description

ON	Checks the magic numbers.
OFf	Does not check the magic numbers.

Default

On

Command Mode

System mode

Usage Guidelines

The show security command reflects the status of the magic number. For example, when enabled, the show security command displays the following:

scr6> sh sec

System Parameters

   Security

     Access Status             ON

     System Password           NONE

     Remote Configuration      PROTECTED

     Local Configuration       ON

     Logout Timeout            5

     Caller ID Security        OFF

     Caller Id Numbers

   PPP Security

     PPP Authentication  IN    CHAP  PAP

     CHAP REFUSE               NONE

     CHAP ALLOW MULTIHOST      OFF

     MAGIC NUMBER CHECK        ON

Profile Parameters

   PPP Security

     PPP Authentication  OUT   NONE

     PPP Authentication  ACCEPT  EITHER

     Token Authentication Support

       TAS Client              0.0.0.0

       Use Local CHAP Secret   ON

     Client

       User Name               loc1

       PAP Password            NONE

       CHAP Secret             NONE

     Host

       PAP Password            NONE

       CHAP Secret             NONE

     Callback

       Request                 OFF

       Reply                   OFF

Related Command

show security

set ppp multilink

To configure the way that PPP links are aggregated, use the set ppp multilink command.

SEt PPP MUltilink ON | OFf [PPPHeader ON | OFf]

Syntax Description

ON	Enable the router to negotiate the multilink PPP protocol. (This protocol allows data to be sent over multiple channels.)
OFf	Disable the router from requesting multilink PPP negotiation. If the remote router requests multilink PPP, the router accepts it, regardless of this setting.
PPPHeader	Uses the PPP header when only one link is up when set to on. Always uses the multilink header when set to off (default).

Default

Multilink On (enabled)
Multilink Header Off (disabled)

Command Mode

System mode

Usage Guidelines

A PPP (Point-to-Point Protocol) header option has been added to software Release 4.2(3.5). In previous software versions, when multilink is enabled and only one link is available, all data packets are sent with multilink headers. This unnecessarily increases network overhead when a PPP header would be acceptable. The PPPHeader option of the set ppp multilink command specifies that when only one link is up, the data packets can be sent with a PPP header.

Example

The following example configures the router so it does not initiate negotiation of multilink PPP:

Host> set ppp multilink off

set ppp negotiation count

To configure the number of times the router attempts to get a successful negotiation, use the set ppp negotiation count command.

SEt PPp NEgotiation COunt attempts

Syntax Description

attempts

Number of times the router attempts to get a successful negotiation. Must be a number between 1 and 100.

Default

10 attempts for PPP

Command Mode

System mode

Example

The following example configures the router to attempt negotiation 20 times:

Host> set ppp negotiation count 20

Related Commands

demand
set auto
set ppp bacp
set ppp callback
set ppp negotiation retry
set ringback
set timeout
show negotiation

set ppp negotiation integrity

To configure time in seconds between line-integrity packets, use the set ppp negotiation integrity command.

SEt PPP NEgotiation INtegrity seconds | OFf

Syntax Description

seconds	Time in seconds between line-integrity packets. Must be a number between 1 and 60.
OFf	Disable line-integrity packets.

Default

10 seconds

Command Mode

System mode

Usage Guidelines

If the router does not receive a line-integrity packet for three consecutive periods, the ISDN line disconnects.

Example

The following example sets the interval between line-integrity packets to 5 seconds.

Host> set ppp negotiation integrity 5

Related Commands

demand
set auto
set ppp bacp
set ppp callback
set ppp negotiation count
set ppp negotiation retry
set ringback
set timeout
show negotiation

set ppp negotiation retry

To configure the amount of time (retry interval) between negotiation attempts, use the set ppp negotiation retry command.

SEt PPp NEgotiation REtry milliseconds

Syntax Description

milliseconds

Amount of time (in milliseconds) between negotiation attempts. Must be a number between 200 and 6000.

Default

3000 milliseconds for PPP

Command Mode

System mode

Example

The following example configures the router to attempt negotiation every 5 seconds:

Host> set ppp negotiation retry 5000 

Related Commands

demand
set auto
set ppp bacp
set ppp callback
set ppp negotiation count
set ppp negotiation integrity
set ringback
set timeout
show negotiation

set ppp ip netmask local

To configure the netmask in a profile as the netmask for the WAN connection, use the set ppp ip netmask local command.

SEt PPP IP NEtmask LOcal ON | OFf

Syntax Description

ON	Uses the netmask configured in profile mode for the WAN connection using that profile.
OFf	Uses the default netmask.

Default

None

Command Mode

Profile mode

Usage Guidelines

Before software Release 4.2(2), the router used the default netmask associated with the negotiated IP address. Although you could specify a netmask, it would be ignored, and the default netmask for the negotiated IP address would be used. With software Release 4.2(2) you can specify that the netmask configured in the user profile should be used instead of the default netmask for the negotiated IP address.

Example

The following example sets the netmask to the negotiated value:

Host> set ppp ip netmask local off

Related Command

set ip address
set ip netmask

set ppp password

To configure the passwords used during PAP and CHAP PPP authentication, use the set ppp password command.

SEt PPP PAssword | SEcret HOst | CLient [ENcrypted] [<password>]

Syntax Description

PAssword	Use the password for PAP authentication.
SEcret	Use the password for CHAP authentication.
HOst	Use profile configurations to authenticate a remote router. The remote device client password must match the Cisco 700 series router host password.
CLient	Use local configurations to authenticate the Cisco 700 series router. The router client password must match the remote device host password.
ENcrypted	Used by the computer when loading a saved configuration text file (UPL output) into the router.
password	The password used for authentication. If the password is absent from the command statement, you are prompted for the entry.

Default

No passwords

Command Mode

System or profile mode

Usage Guidelines

Profiles that do not have passwords configured explicitly use the password configured in system mode.

The encrypted parameter is used by the computer when loading a saved configuration into the router.

When this command is loaded back into the original router (or another router), the router knows the password is already encrypted by examining the encrypted parameter.

---

Warning   Do not use the encrypted parameter when typing in the system password manually. If you do, the router will try to decrypt it, and you will not be able to log in to the router.

---

Examples

The following example configures the router with a PAP client password by prompting you for the password and verification of the password:

Host> set ppp password client

Enter new Password: <new password>

Re-Type new Password: <new password>

The following example deletes the CHAP client password by leaving the password field and verification field blank:

Host> set ppp secret client

Enter new Password: 

Re-Type new Password: 

Related Commands

set password
set ppp authentication
set ppp authentication accept
show security

set ppp tas

To change the user mode, use the set ppp tas command. (TAS is the acronym for Token Authentication Support.)

SEt PPP TAS CEntral | DIstributed | OFf

Syntax Description

CEntral	Turn on single-user mode and send a user-information request to the designated Token Authentication Client.
DIstributed	Turn on single-user mode, but send a user-information request to the source of the interesting packet if the interesting packet is an IP packet.
OFf	Turn off single-user mode.

Default

Off

Command Mode

Profile mode

Usage Guidelines

When the router sends a request to an Authentication Authority Account (AAA) client and receives a reply, it tries to make an ISDN connection. However, there is no guarantee that a B channel will be available for this connection. Other profiles or plain old telephone service (POTS) ports might occupy both B channels. If a B channel is not available, the router sends a failure message back to the AAA client.

Example

The following example turns on single-user mode and sends a user-information request to the designated Token Authentication Client:

Host> set ppp tas central

Related Commands

set ppp tas
show security

set ppp tas chapsecret local

To set the Token Authentication Client to use CHAP from the Cisco Secure Authentication Agent for CHAP to be configured locally, use the set ppp tas chapsecret local command.

SEt PPP TAS CHapsecret LOcal ON | OFf

Syntax Description

ON	Turn on the local configuration.
OFf	Turn off the local configuration.

Default

None

Command Mode

Profile mode

Usage Guidelines

When the router is authenticated with CHAP, this setting determines if Token Authentication Client can overwrite the chapsecret parameter by providing a CHAP secret in its reply to the router.

Example

The following example turns local Token Authentication Client CHAP secret on:

Host> set ppp tas chapsecret local on

Related Commands

set ppp tas
show security

set ppp tas client

To identify the Token Authorization Client (also known as Cisco Secure Authentication Agent client) to which the router sends the user information request, use the set ppp tas client command.

SEt PPP TAS CLient ipaddress

Syntax Description

ipaddress

TAS client IP address.

Default

None

Command Mode

System or profile mode

Usage Guidelines

In system mode, this command configures the default Token Authorization Client for every profile. In profile mode, it overwrites the system-level setting. Unless TAS is set to off, a profile is required to set the Token Authorization Client.

Example

The following example sets the TAS client to 10.10.10.3:

Host> set ppp tas client 10.10.10.3

Related Commands

set ppp tas
set ppp tas chapsecret
show security

set ppp termreq count

To configure the number of times the router sends a terminate request packet without receiving an answer or disconnecting the ISDN line, use the set ppp termreq count command.

SEt PPP TErmreq COunt attempt

Syntax Description

attempt

Number of times the router sends a terminate request packet without receiving an answer or disconnecting the ISDN line. Must be between 1 and 100.

Default

Two tries

Command Mode

System mode

Example

The following example sends terminate request packets five times before disconnecting the ISDN line:

Host> set ppp termreq count 5

show negotiation

To display all negotiation parameters, use the show negotiation command.

SHow NEgotiation [ALl]

Syntax Description

ALl	Display system and profile negotiation parameters.

Command Mode

System or profile mode

Usage Guidelines

In profile mode, this command displays only parameters that can be configured by the profile. Values redefined from the template value are indicated with an asterisk.

In system mode, this command displays all system parameters. This command displays both system and profile parameters when the all parameter is included in the statement.

Example

The following example shows output from the show negotiation command:

Host> show negotiation

System Parameters

    CPP Negotiation Parameters

      Integrity Interval        10

      Negotiation Abort         DISCONNECT

      Retry Count               6

      Retry Interval            1000

      Terminate Count           2

      Multilink              ON 

Profile Parameters

 
      Compression               STAC

      BACP                      ON

      Address Negotiation Local OFF 

Negotiated Parameters

      Connection   1            Virtual

      Connection   2            Virtual

      Connection   3            Virtual

      Connection   4            Virtual 

Related Commands

demand
set auto
set ppp bacp
set ppp callback
set ppp negotiation count
set ppp negotiation retry
set ringback
set timeout