Product and Software: This article applies to all ArubaOS later than 6.1.
ArubaOS versions before 6.1 only support PPPoE with PAP authentications.
Many PPPoE servers presently deployed require Challenge Handshake Authentication Protocol (CHAP). CHAP involves no exchange of a configured "secret-key".
At ArubaOS 6.1, CHAP was introduced for RAPs with PPPoE connections. A PPPoE client running on RAP can handle CHAP authenticate requests from the PPPoE server. PAP and CHAP parameters can be configured simultaneously.
The new command that is being introduced for the configuration of CHAP secret-key is:
(Aruba3400) #configure terminal provision-ap pppoe-chap-secret <KEY>
show provisioning-params: will be changed to include the CHAP secret-key in the display.
CHAP is done with the PPPoE server, not the controller. Any issue will be between the RAP and ISP.