From: Stan Buskus (stan.buskus@xxxxxxx)
Date: Fri Dec 08 2000 - 10:42:11 GMT-3
I believe you still need the username on R6 because R5 includes its host name
in the response to the challenge. R6 uses this host name to reference the
password to compare the hash result from R5. Which begs the question, why do
Cisco routers perform a two-way challenge if they use the same password for
each challenge?
Stan Buskus
Wayne Hu wrote:
> Hi, Tony
> Does that mean you don't need config Username and password under R6 to
> authenticate the calls from the R5?
>
> Wayne
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Tony Olzak
> Sent: December 7, 2000 5:07 PM
> To: Stan Buskus; ccielab@groupstudy.com
> Subject: Re: Question about ppp auth chap callin
>
> R5-----R6
>
> If you put "callin" on R5, R6 won't have to authenticate when it is called
> by R5. R6 will have to authenticate if it calls R5. Without the command,
> both sides must authenticate to each other.
>
> Tony
>
> ----- Original Message -----
> From: "Stan Buskus" <stan.buskus@att.net>
> To: <ccielab@groupstudy.com>
> Sent: Thursday, December 07, 2000 8:35 AM
> Subject: Question about ppp auth chap callin
>
> > Hi Everyone,
> > I have spent the last couple of days playing with DDR using modems
> > (can't afford ISDN). I was under the impression from "Building Cisco
> > Remote Access Networks" that the called party was the first to issue a
> > challenge. But after looking at the debugs it appears that the calling
> > modem issues the challenge. Am I reading these debugs wrong?
> >
> > Also, how does "callin" feature change the authentication process? The
> > "debug ppp auth" gives very little information about what is going on.
> > I've tried configuring the callin option several ways. First I put it on
> > both routers, which looks like normal ppp auth. The I added it on the
> > calling router and then the called router. In both cases it looks like
> > the same results. Can someone explain what goes on?
> >
> > Thanks,
> > Stan Buskus
> >
> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:26:00 GMT-3