RE: One Way authentication using chap

From: BUI, TIN T (SBCSI) (tb4565@xxxxxxx)
Date: Thu Mar 01 2001 - 20:12:47 GMT-3


   
Instead of disabling ppp auth on B, how about putting ppp chap refuse callin
on B?

> Tin T. Bui
> Senior Network Manager
> CCNP, CNE, MCP
> Network Management Center
> SBC Services Inc.
> 7337 Trade Street, Rm 1110
> San Diego, Ca 92121
> Office #: 858-886-4644/858-886-4589
> Pager #: 858-494-0482
> Fax #: 858-549-4103
> Email: tb4565@sbc.com
>

-----Original Message-----
From: Yi Fang [mailto:yfang@houston.omnes.slb.com]
Sent: Wednesday, February 28, 2001 2:44 PM
To: Wang, Roger; ccielab@groupstudy.com
Subject: Re: One Way authentication using chap

Called party will always authenticate incoming call unless you disable
authentication on the called party(do not put ppp auth ... under your
interface).

Yi Fang
----- Original Message -----
From: "Wang, Roger" <Roger@inteqnet.com>
To: <ccielab@groupstudy.com>
Sent: Wednesday, February 28, 2001 4:06 PM
Subject: RE: One Way authentication using chap

> Since we're on the subject...
>
> A calls B, what commands does it take so B does not challenge A?
>
> Thanks,
>
> Rog
>
> > -----Original Message-----
> > From: Yi Fang [mailto:yfang@houston.omnes.slb.com]
> > Sent: Wednesday, February 28, 2001 3:15 PM
> > To: Arthayuth.B@datacraft-asia.com; dp595@optonline.net;
> > johnny.dedon@exodus.net; ccielab@groupstudy.com
> > Subject: Re: One Way authentication using chap
> >=20
> >=20
> > No, they are different.
> > 1, ppp auth chap callin. Assume routerA is configured with=20
> > this option and
> > peer is routerB with normal ppp auth chap. * A calls B, no=20
> > auth from A side
> > but B auths A. * B calls A, both A and B auth.
> > 2, ppp chap refuse callin. Assume routerA is configured with=20
> > this option and
> > peer is routerB with normal "ppp auth chap ppp". * A calls B,=20
> > both A and B
> > auth using chap. * B calls A, B will try chap first, then A=20
> > refuse, then B
> > changes to ppp, it goes through.
> >=20
> > Yi Fang
> > ----- Original Message -----
> > From: <Arthayuth.B@datacraft-asia.com>
> > To: <dp595@optonline.net>; <johnny.dedon@exodus.net>;
> > <ccielab@groupstudy.com>
> > Sent: Tuesday, February 27, 2001 8:48 PM
> > Subject: RE: One Way authentication using chap
> >=20
> >=20
> > > How about ppp chap refuse callin is same or different with ppp
> > > authentication chap callin ?
> > >
> > > Arthayuth
> > > Network Consultant
> > > CIP, CCNP, CCDP
> > >
> > > > -----=A2=E9=CD=A4=C7=D2=C1=B5=E9=B9=A9=BA=D1=BA-----
> > > > =A8=D2=A1: Dan [SMTP:dp595@optonline.net]
> > > > =CA=E8=A7=E0=C1=D7=E8=CD: 28 =A1=D8=C1=C0=D2=BE=D1=B9=B8=EC 2544 =
> 3:58
> > > > =B6=D6=A7: Johnny Dedon; Groupstudy
> > > > =E0=C3=D7=E8=CD=A7: Re: One Way authentication using chap
> > > >
> > > > 'callin' goes on the calling router in this situation. =20
> > Whichever router
> > > > you
> > > > put "callin" on will not challenge another router when=20
> > "it" has place
> > the
> > > > call "out"
> > > >
> > > >
> > > > Dan Pontrelli
> > > > Customer Installation Engineer - Verio NYC
> > > > CCNP, MCSE, CNA
> > > >
> > > > ----- Original Message -----
> > > > From: "Johnny Dedon" <johnny.dedon@exodus.net>
> > > > To: "Groupstudy" <ccielab@groupstudy.com>
> > > > Sent: Tuesday, February 27, 2001 3:44 PM
> > > > Subject: One Way authentication using chap
> > > >
> > > >
> > > > > Simple question
> > > > > If I want to use Chap authentication but the=20
> > requirement is one way
> > > > > authentication, where do I place the command ppp auth=20
> > chap callin? I
> > am
> > > > > thinking that it goes on the called router, is this correct?
> > > > >
> > > > > Johnny Dedon
> > > > > Senior Staff Consultant
> > > > > Exodus Professional Services
> > > > > johnny.dedon@exodus.net
> > > > > www.exodus.net
> > > > >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:17 GMT-3