Introduction To ISDN, Part III: Configuring PPP PAP Authentication
Now we know how the ISDN link comes up (interesting traffic), and some scenarios that might cause the link to stay up, we need to look at ISDN authentication schemes. The two methods Cisco certification candidates must be familiar with are PAP and CHAP.
Password Authentication Protocol (PAP) sends the username and password over the ISDN link in clear-text. Sending any passwords over any WAN link in clear-text is generally a bad idea, but it's important to know you have this option.
Regarding both PAP and CHAP, it's a common misunderstanding that each side must authenticate the other. PAP and CHAP both support bidirectional and unidirectional authentication; that is, R1 can authenticate R2 without R2 necessarily authenticating R1. It's more common to use unidirectional authentication in a lab environment than a production network, but keep in mind that bidirectional authentication is an option, not a requirement.
The configurations of PAP and CHAP do have their similarities. For both, you'll configure a username/password combination in global configuration mode. Newcomers to ISDN sometimes put the local router name in for the username; remember that the remote router name is the username.
The only real advantage of PAP over CHAP comes in the password configuration. Since PAP actually sends the password as a whole over the link, the two routers can send different passwords during authentication. The operation of CHAP requires that both routers use the same password, and we'll see why in tomorrow's article.
Under the BRI interface, you'll enter encapsulation ppp and ppp authentication pap. So far, your authentication scheme looks like this:
username R2 password CCNA
Int bri0
encapsulation ppp
ppp authentication pap
PAP requires an extra command at this point. The ppp pap sent-username command is required under the interface, indicating the username and password this router will be sending to the remote router.
Int bri0
encapsulation ppp
ppp authentication pap
ppp pap sent-username R1 password CISCO
I always encourage CCNA and CCNP candidates to use as many debugs as possible when working in their lab, since these commands show us how things work. For any PPP authentication, always run debug ppp negotiation before sending interesting traffic to trigger the call. Watching exactly how PAP and CHAP work give you a much better understanding of what's going on "behind the command", and makes you a stronger candidate and a stronger networking engineer.
Tomorrow, we'll take a look at CHAP, and why routers cannot use the same password on both ends of the link.
Keep studying!
Chris Bryant
CCIE ? #12933
About The Author
Chris Bryant, CCIE (TM) #12933, has been active in the Cisco certification community for years. He worked his way up from the CCNA to the CCIE, and knows what CCNA and CCNP candidates need to know to be effective on the job and in the exam room.
He is the owner of chris@thebryantadvantage.com, where he teaches CCNA and CCNP courses to small groups of exam candidates, ensuring they each receive the individual attention they deserve. Classes are offered over the Internet and in person in select cities. Chris has custom-written the Study Guide and Lab Workbook used in each course - no third-party training materials or simulators are used. You're invited to visit our site and check out our CCNA and CCNP courses and study aids, and to sign up for our weekly newsletter written personally by Chris. Chris is always glad to hear from Cisco certification candidates at chris@thebryantadvantage.com
Do you remember that frustrating feeling when you find an... Read More
When you visit department stores and see that majority of... Read More
When Great Plains Software was designing and developing Great Plains... Read More
One day, you suddenly realize that your computer started to... Read More
If your company has regional and worldwide operations, you might... Read More
I have always regretted how Microsoft price gouges and rips... Read More
Microsoft Great Plains, former Great Plains Software Dynamics / eEnterprise... Read More
Microsoft Business Solutions Small Business Manager is scaled down Great... Read More
Homeland security, airport security, Internet security ??" these days we???re... Read More
Corporate ERP/MRP selection might be tough one, especially considering very... Read More
Microsoft Great Plains ? ERM from Microsoft Business Solutions and... Read More
Professional services firm cuts costs and improves productivity with integrated... Read More
Microsoft Business Solutions Great Plains, former Great Plains Software Dynamics/eEnterprise... Read More
Around the same time Microsoft made its move with .Net... Read More
Microsoft Business Solutions Great Plains as new ERP for multinational... Read More
Formatting and reinstalling windows 98 is very easy if you... Read More
Microsoft Business Solutions Navision is main ERP application for European,... Read More
Microsoft CRM customization techniques are very diversified and based on... Read More
Microsoft Great Plains is main mid-market application from Microsoft Business... Read More
Former Great Plains Software Dynamics/eEnterprise, and currently Microsoft Business Solutions... Read More
ERP is the acronym of Enterprise Resource Planning. Multi-module ERP... Read More
We are in a transition phase in the Managerial Administration... Read More
Microsoft CRM is CRM answer from Microsoft and attempt to... Read More
How do you run a program on a remote server... Read More
Midsize business or non-profit organization should decide if one-vendor solution... Read More
Remember old good days when your company probably had Great... Read More
Adware is a type of Spyware program that displays some... Read More
Bar charts, bar graphs, and any other chart or graph... Read More
Microsoft Retail Management (RMS) and Microsoft Great Plains are retail... Read More
Combining Microsoft Business Solutions Great Plains ERP with non-Microsoft Business... Read More
Microsoft Great Plains is main Microsoft Business Solutions accounting package... Read More
You would like to protect your documents, wouldn't you? Reasons... Read More
Task Manager is a Windows system utility that displays thetasks... Read More
MSN messenger is a pretty cool invention. I mean I'm... Read More
Introduction to C++Why Learn C++?C++ may at first seem like... Read More
We would like first emphasize the change in the paradigm.... Read More
Microsoft Business Solutions Great Plains is Dexterity-written application and currently... Read More
User interfaces and accessibility are some of the most important... Read More
It's no secret that software companies operate in a very... Read More
Research bears that less than 70 percent of development projects... Read More
Passwords protect your most sensitive personal, financial and business information.... Read More
If you've been using MySQL database to store your important... Read More
We live in a post-industrial age where information is the... Read More
Viruses and spyware usually show up on your computer one... Read More
Currently Microsoft Business Solutions is on the way of creating... Read More
Upgrading. Downtime. Maintenance. Hardware obsolescence. Implementation issues. The litany of... Read More
When reading an article where some term is used often,... Read More
This article is for advanced Microsoft CRM SDK C# developers.... Read More
Let's say that you have a software project that's under... Read More
In 2004 Oracle, Inc. made its new step toward J2EE... Read More
Software |