Configuring PPP PAP Authentication
Now we know how the ISDN link comes up (interesting traffic), and some scenarios that might cause the link to stay up, we need to look at ISDN authentication schemes. The two methods Cisco certification candidates must be familiar with are PAP and CHAP.
Password Authentication Protocol (PAP) sends the username and password over the ISDN link in clear-text. Sending any passwords over any WAN link in clear-text is generally a bad idea, but it???s important to know you have this option.
Regarding both PAP and CHAP, it???s a common misunderstanding that each side must authenticate the other. PAP and CHAP both support bidirectional and unidirectional authentication that is, R1 can authenticate R2 without R2 necessarily authenticating R1. It???s more common to use unidirectional authentication in a lab environment than a production network, but keep in mind that bidirectional authentication is an option, not a requirement.
The configurations of PAP and CHAP do have their similarities. For both, you???ll configure a username/password combination in global configuration mode. Newcomers to ISDN sometimes put the local router name in for the username remember that the remote router name is the username.
The only real advantage of PAP over CHAP comes in the password configuration. Since PAP actually sends the password as a whole over the link, the two routers can send different passwords during authentication. The operation of CHAP requires that both routers use the same password, and we???ll see why in tomorrow???s article.
Under the BRI interface, you???ll enter encapsulation ppp and ppp authentication pap. So far, your authentication scheme looks like this:
username R2 password CCNA
Int bri0
encapsulation ppp
ppp authentication pap
PAP requires an extra command at this point. The ppp pap sent-username command is required under the interface, indicating the username and password this router will be sending to the remote router.
Int bri0
encapsulation ppp
ppp authentication pap
ppp pap sent-username R1 password CISCO
I always encourage CCNA and CCNP candidates to use as many debugs as possible when working in their lab, since these commands show us how things work. For any PPP authentication, always run debug ppp negotiation before sending interesting traffic to trigger the call. Watching exactly how PAP and CHAP work give you a much better understanding of what???s going on ???behind the command???, and makes you a stronger candidate and a stronger networking engineer.
Tomorrow, we???ll take a look at CHAP, and why routers cannot use the same password on both ends of the link.
Keep studying!
About The Author:
Chris Bryant, CCIE (TM) #12933, has been active in the Cisco certification community for years. He worked his way up from the CCNA to the CCIE, and knows what CCNA and CCNP candidates need to know to be effective on the job and in the exam room.
He is the owner of http://www.thebryantadvantage.com, where he teaches CCNA and CCNP courses to small groups of exam candidates, ensuring they each receive the individual attention they deserve. Classes are offered over the Internet and in person in select cities. Chris has custom-written the Study Guide and Lab Workbook used in each course - no third-party training materials or simulators are used. You're invited to visit our site and check out our CCNA and CCNP Courses, Flash Card Books, and to sign up for our weekly newsletter written personally by Chris. Chris is always glad to hear from Cisco certification candidates at http://www.thebryantadvantage.com.
shuttle from Midway Glen Ellyn ..The cornerstone of successful automated office systems is the ability... Read More
Bad News - the Threat is Bigger than it SeemedHow... Read More
In order to implement VLANs in a network environment, you'll... Read More
Microsoft Retail Management (RMS) and Microsoft Great Plains are retail... Read More
FTP stands for "file transfer protocol". FTP is basically a... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
If you are in the market for new staffing software,... Read More
Are you ready? SQL Server 2005, the next-generation data management... Read More
Healthcare facilities such as clinics, hospitals, and biomedical laboratories can... Read More
I've been active in the Cisco Certification track for four... Read More
Simply put, fleet maintenance allows companies to monitor and maintain... Read More
Great Plains Fixed Assets Management module is a robust tool... Read More
If someone entered your home, uninvited and installed numerous cameras... Read More
Microsoft Great Plains and Microsoft Retail Management System (Microsoft RMS)... Read More
Microsoft Business Solutions Great Plains serves multiple industries in the... Read More
The title of "software engineer" has got to be among... Read More
We would like to give you several situations, when you... Read More
If you're online using a dialup Internet connection, you'll probably... Read More
Microsoft Great Plains and Microsoft CRM become more and more... Read More
(1) Avoid using the same variable again and again for... Read More
Microsoft Great Plains is main Microsoft Business Solutions product, targeted... Read More
A wiki is an editable text-based website. But you don't... Read More
Looks like Microsoft Great Plains becomes more and more popular,... Read More
Fundraising software lets you connect with donors in a way... Read More
A few months back I really got sick of my... Read More
shuttle from O'Hare North Chicago ..The Internet is reshaping every form of communications medium, and... Read More
Before September 1995, Microsoft Windows was an MS-DOS program. DOS... Read More
The COSMIC FP (function point) software quality metric, is no... Read More
The first topic we are going to discuss... Read More
Linux essentials:It's free for download but you have to pay... Read More
It could just be me, but my experiences with document... Read More
I have always regretted how Microsoft price gouges and rips... Read More
Java has come along a long way. Many would agree... Read More
Siebel is traditional CRM market leader, however and mostly due... Read More
This is a short article, written in question/answer/FAQ style to... Read More
Microsoft Business Solutions Great Plains, former Great Plains Software Dynamics/eEnterprise... Read More
What is Groupware?Have you ever had to manage document collaboration... Read More
Collaboration SoftwareCollaboration Software, also known as group collaboration software or... Read More
FTP stands for "file transfer protocol". FTP is basically a... Read More
Software development is a risky business.Many software developers are barely... Read More
This is intermediate level SQL scripting article for DB Administrator,... Read More
Software Engineering is the Systematic Approach for analysis design implementation... Read More
The Software 2005 conference is now a wrap. This conference,... Read More
Although we don't know whether Microsoft ever envisioned such a... Read More
Microsoft Great Plains is now targeting large and midsize businesses... Read More
One of the things we can be as certain of... Read More
GroupwareThe internet is full of 1.5 million to 7 million... Read More
According to a survey conducted by InfoTrends/CAP Ventures entitled "Content-Centric... Read More
Not all of us have the luxury of working both... Read More
If you copy something from a Web site or elsewhere...... Read More
Software |