From: Stan Buskus (stan.buskus@xxxxxxx)
Date: Thu Dec 07 2000 - 21:49:23 GMT-3
I think I was confused with the symatics. If I understand it correctly. It's
not so much that callin node doesn't require the other node to authenticate,
but a callin node will not issue a challange if it orginates the call.
So,
Scenario #1 R5/R6 ppp auth chap
R5---Calls------>R6
R5<--Challange---R6
R5---Response--->R6
R5<--Welcome---R6
R5---Challange-->R6
R5<--Response---R6
R5---Welcome-->R6
Scenario #2 R5 ppp auth chap callin (R5 calls R6)
R5---Calls------>R6
R5<--Challange---R6
R5---Response--->R6
R5<--Welcome---R6
Scenario #3 R5 ppp auth chap callin (R6 calls R5)
R5<---Calls-------R6
R5---Challange--->R6
R5<--Response----R6
R5---Welcome--->R6
R5<---Challange---R6
R5---Response--->R6
R5<---Welcome---R6
Stan Buskus
Tony Olzak wrote:
> R5-----R6
>
> If you put "callin" on R5, R6 won't have to authenticate when it is called
> by R5. R6 will have to authenticate if it calls R5. Without the command,
> both sides must authenticate to each other.
>
> Tony
>
> ----- Original Message -----
> From: "Stan Buskus" <stan.buskus@att.net>
> To: <ccielab@groupstudy.com>
> Sent: Thursday, December 07, 2000 8:35 AM
> Subject: Question about ppp auth chap callin
>
> > Hi Everyone,
> > I have spent the last couple of days playing with DDR using modems
> > (can't afford ISDN). I was under the impression from "Building Cisco
> > Remote Access Networks" that the called party was the first to issue a
> > challenge. But after looking at the debugs it appears that the calling
> > modem issues the challenge. Am I reading these debugs wrong?
> >
> > Also, how does "callin" feature change the authentication process? The
> > "debug ppp auth" gives very little information about what is going on.
> > I've tried configuring the callin option several ways. First I put it on
> > both routers, which looks like normal ppp auth. The I added it on the
> > calling router and then the called router. In both cases it looks like
> > the same results. Can someone explain what goes on?
> >
> > Thanks,
> > Stan Buskus
> >
> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:26:00 GMT-3