CHAP Authentication

From: Grant Patten (gpatten@xxxxxxxxxx)
Date: Tue May 08 2001 - 14:12:22 GMT-3


   
I'm struggling to get a good understanding of how exactly CHAP
Authentication works. I think I'm missing something fundamental and
hopefully one of you can help me out. Thanks.

When I use the configuration below, I get the following debug messages:

1d15h: BR0:1 PPP: Treating connection as a callout
1d15h: BR0:1 PPP: Phase is AUTHENTICATING, by both
1d15h: BR0:1 CHAP: Using alternate hostname ISDN2
1d15h: BR0:1 CHAP: O CHALLENGE id 14 len 26 from "ISDN2"
1d15h: BR0:1 CHAP: I CHALLENGE id 14 len 26 from "ISDN1"
1d15h: BR0:1 CHAP: Using alternate hostname ISDN2
.d15h: BR0:1 CHAP: O RESPONSE id 14 len 26 from "ISDN2"
1d15h: BR0:1 CHAP: I FAILURE id 14 len 25 msg is "MD/DES compare failed"

Here is the relevant portions of the configs I'm using on R1 and R2. I
changed the encrypted ppp chap password to what I actually set:

R2

hostname R2
!
!
username ISDN1 password 0 CCIE
!
!
interface BRI0
 ip address 147.10.1.2 255.255.255.0
 no ip directed-broadcast
 encapsulation ppp
 dialer map ip 147.10.1.1 name ISDN1 broadcast 8358661
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 0835866201
 isdn spid2 0835866401
 ppp authentication chap
 ppp chap hostname ISDN2
 ppp chap password cisco

R1
hostname R1
!
!
username ISDN2 password 0 cisco
!
interface BRI0
 ip address 147.10.1.1 255.255.255.0
 no ip directed-broadcast
 encapsulation ppp
 dialer map ip 147.10.1.2 name ISDN2 broadcast
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 0835866101
 isdn spid2 0835866301
 ppp authentication chap
 ppp chap hostname ISDN1
 ppp chap password CCIE
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:36 GMT-3