use passive mode of chap-proxy