Configuring an endpoint for remote access

This type of endpoint permits the local system to accept incoming PPP connection requests using a getty(M) process that is running on the local system.

The following information is used to configure an entry for the endpoint in the /etc/ppphosts file:

PPP login name

The account name that PPP on the local system will use to accept incoming connections.

If you need to define an account, click on the Add account button. Enter the login name, password, and user ID on the Add PPP Account screen and click on OK.

The account created will use the program /usr/lib/ppp/ppp as its login shell (see ppp(ADMN)).

PPP address pool

If you want the PPP daemon to try to assign a pair of IP addresses to the local and remote ends of the link, select Yes. When the PPP daemon attempts to bring up the link, it will attempt to assign an address pair from the set of pairs defined for the pool tag selected in the Pool entry field. It will try each pair in succession until it succeeds. The link fails if none of the address pairs is available.

To configure the available address pools, click on Configure pools. The Configure PPP address pools screen displays the available pools named by their tags and the address pairs defined for the currently selected pool tag.

To add a new pool tag, click on the Add button below the list of tags. Enter the name of the new pool tag on the Add PPP address pool screen and click on OK.

To add a pair of local and remote IP addresses to a pool, select the pool tag and click on the Add button below the list of local and remote IP addresses. On the Add PPP address pool member screen, enter the local and remote IP addresses and click on OK.

To modify a pair of local and remote IP addresses in a pool, select the pool tag and then select the address pair that you want to modify. Click on the Modify button below the list of local and remote IP addresses. On the Modify PPP address pool member screen, change the local and remote IP addresses and click on OK.

To delete a pair of local and remote IP addresses from a pool, select the pool tag and then select the address pair that you want to delete. Click on the Delete button below the list of local and remote IP addresses.

To delete a pool tag, select it from the list and click on the Delete button below the list of tags.

To abandon any changes you have made to the address pools, click on Cancel on the Configure PPP address pools screen.

Pool entry

Select the tag name corresponding to a pool of IP address pairs.

Local address

The IP address or the host name for the local end of the PPP link. The remote system must agree to use the specified address or the local system will refuse to establish the link.

If a host name is entered, it is saved in /etc/ppphosts rather than the corresponding IP address. The name must be resolvable using DNS or an entry in the /etc/hosts file.

Leave this field blank or set it to ``0.0.0.0'' if you want the remote site to assign an IP address.

You can change how IP addresses are negotiated using the IP advanced options. See ``Configuring IP parameters'' for details.

Remote address

The IP address or the host name for the system at the remote end of the PPP link. The remote system must agree to use the specified address or the local system will refuse to establish the link.

If a host name is entered, it is saved in /etc/ppphosts rather than the corresponding IP address. The name must be resolvable using DNS or an entry in the /etc/hosts file.

Leave this field blank or set it to ``0.0.0.0'' if you want the remote system to assign an IP address.

You can change how IP addresses are negotiated using the IP advanced options. See ``Configuring IP parameters'' for details.

Netmask

The netmask to use over a link connected to this endpoint. The netmask must match that used by the remote system. For more information on netmasks, see ``Netmask setting''.

Authentication

You can select one of the Challenge-Handshake Authentication Protocol (CHAP) , the Microsoft extension to the CHAP protocol (MSCHAP) or the Password Authentication Protocol (PAP) to authenticate a remote system:

1. Select the authentication method to be used and click on Configure.

2. On the CHAP/MSCHAP/PAP Authentication Options screen, enter the ID and password that are needed to authenticate the remote system. The ID indicates the entry to be used from the /etc/pppauth file for local host ID lookups. The ID and password are optional, provided there is a default entry (marked by an asterisk) in the /etc/pppauth file.

   You can also change the time period in minutes within which the authentication must be performed. The default value is one minute.

3. Click on OK when you have finished entering the details needed to authenticate the remote system.

See ``Example entry for remote access'' for an example entry in the /etc/ppphosts file for this type of configuration.