Home
>
Software
>
Cisco Certification: Introduction To ISDN, Part IV

Cisco Certification: Introduction To ISDN, Part IV

In part III of this ISDN primer, we learned that PPP has two main methods of authentication that Cisco certification candidates need to know how to configure: PAP and CHAP.

PAP has very few advantages over CHAP. PAP passwords are carried over the line in clear-text, which in today's world is a very bad idea. PAP configuration also requires additional configuration with the "ppp pap sent-username" command, so anyone who can see your running configuration can also see the PAP password.

The only advantage PAP has over CHAP is a slim one. With PAP, a different password can be used by the each of the routers involved in the authentication. CHAP requires that the password be the same. Why? We'll see as we examine CHAP authentication.

The First Step to Configuring CHAP

CHAP requires you to configure a username / password combination for any remote device that will be involved in authentication. (We're assuming that the routers have already been configured with their names via the global hostname command.) Both routers will use the password CISCO.

R1:

username R2 password CISCO

int bri0

encapsulation ppp

ppp authentication chap

R2:

username R1 password CISCO

int bri0

encapsulation ppp

ppp authentication chap

Why CHAP Authentication Requires The Same Password On Both Routers

Remember how PAP sends the password over the line in clear-text? CHAP does not actually send the password over the line at all. Instead, CHAP runs a hash algorithm using the password and a random number. It is the result of this hash that is passed over the link. The remote router receives the hash result, and runs the exact same algorithm. If the result is the same, the authentication attempt will be successful. If the result is different, the authentication will fail. For this reason, the passwords must be the same.

Debug The Connection If Authentication Fails

Since two passwords are involved, the chances of one of the passwords being mistyped doubles. If you configure CHAP and the link dials but drops almost immediately, there's an authentication problem. Run debug ppp negotiation and attempt to dial the line again. The output of this particular debug will show you where the problem is.

Chris Bryant, CCIE (TM) #12933, has been active in the Cisco certification community for years. He has written several books that have helped CCNA candidates around the world achieve the coveted CCNA certification, including several concentrating on binary math conversions and subnetting questions that the average CCNA candidate will need to answer on their CCNA exams.

He is the owner of The Bryant Advantage (http://www.thebryantadvantage.com) where he teaches affordable world-class CCNA courses via the Internet, and sells his popular Cisco certification books. He???s proud to have helped CCNA candidates around the world achieve their career goals. Mr. Bryant???s books and courses are sold on his site, on eBay, and on several other major Cisco certification sites.

eco-friendly cleaning service Des Plaines ...

In The News:

Uber teen accounts now feature live video streaming from the driver's camera, but encrypted recordings stay on Uber's servers for up to 14 days.

Router firewalls and software firewalls serve different roles in protecting your home Wi-Fi from unwanted traffic and suspicious connections.

A Chrome extension with 70,000 users and a 4.7-star rating began injecting fake update warnings after a threat actor acquired and weaponized it.

Amazon's Alexa+ rolls out free to Fire TV devices across the U.S., but hands-free microphones and stored voice data raise key privacy questions.

Meta's new teen accounts settlement sets a default two-hour daily limit on Instagram and Facebook, plus night mode and school mode restrictions.

The CareCloud data breach exposed Social Security numbers, banking information and medical records belonging to more than 3.75 million people.

Waymo reveals its custom 5-nanometer chip and dual computing systems designed to take over instantly if the robotaxi's primary computer fails.

Identity theft now includes account takeover, phone hijacking and payment card exposure. Here's what to look for in identity theft protection services.

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future.

The FBI and Justice Department seized domains tied to QScan and QTRouter, tools allegedly used by China-linked hackers to breach NASA and other agencies.

Uber Eats drone delivery launches later this year through a Zipline partnership, starting in Dallas and Houston with a goal of one million daily flights.

Medicare Open Enrollment scams start with data broker targeting months before October. Learn why August is the time to remove your personal info.

The World Humanoid Robot Games' crashes show how far the technology still needs to go to be useful, "Survivor" reality TV star and robotics scientist Christian Hubicki says.

X-Humanoid's TianGong Ultra ran 100 meters in 9.32 seconds at Beijing's World Humanoid Robot Games, beating last year's winner by more than half.

A tap-to-pay charity scam is turning small $15 or $20 donations into charges of nearly $5,000, with victims losing thousands before they notice.

Kurt Knutsson shares seven emergency preparedness lessons from surviving Hurricane Katrina inside a New Orleans hotel as conditions turned desperate.

A contractor stored credentials in a Google Doc set to "Anyone with the link," and Google Search autocomplete eventually surfaced the password string.

New Orleans 911 uses Carbyne AI to triage repeat auto crash calls, but strict limits keep human call-takers in control of all other emergencies.

A single card skimmer can generate $1 million in stolen funds, and Secret Service video shows criminals installing them in under two seconds.

ChatGPT, Meta AI and Google now use memory, connected apps and past chats to personalize ads and responses in ways most users overlook today.

MagicalAuth by Glide.id uses cryptographic SIM credentials to verify bank logins without sending SMS OTP codes that scammers can intercept or phish.

A humanoid robot named Lightning Bolt ran 100 meters in 9.39 seconds at the World Humanoid Robot Games in Beijing, edging Usain Bolt's record.

An AI agent using Claude AI canceled another person's gym booking after finding a security flaw in the reservation system's authorization checks.

Trump signed a memorandum allowing vetted private U.S. companies to conduct cyber operations against foreign criminal organizations under oversight.

Your Social Security number appeared in a breach, but exposure and identity theft are not the same. Here's how identity restoration actually works.

Cisco Certification: Introduction To ISDN, Part IV

Software