From: MICHAEL J. KILPATRICK (mjkilpat@xxxxxxxxxxx)
Date: Mon May 20 2002 - 09:26:26 GMT-3
Just got done testing this in the lab.... thanks for starting the thread
Charles, now it all makes good sense to me.
Both CALLIN and CALLOUT options function the same, just in the opposite
directions... and both keywords function the same for PAP and CHAP.
CALLIN ----> NON 1-way
CALLIN <---- NON 2-way
CALLIN ----> CALLIN 1-way
CALLOUT ----> NON 2-way
CALLOUT <---- NON 1-way
CALLOUT ----> CALLOUT 1-way
CALLIN ----> CALLOUT no authentication
CALLIN <---- CALLOUT 2-way
** If neither keyword is specified, 2-way is required
** When CALLIN is specified on local router, router will only authenticate
calls INBOUND
** When CALLOUT is specifed on local router, router will only authenticate
call OUTBOUND
Please let me know if I made a mistake.
Mike
>>> "Krucker, Louis" <louis.krucker@sunrise.net> 05/20/02 06:48AM >>>
If you set the callin keyword, the router challenges only on incoming calls.
If router A has set callin and dials Router B, Router A dont
challenge router B for chap, this is one way chap.
Hope this one clears a bit
cheers
Louis
-----Original Message-----
From: Michael Jia
To: ccielab@groupstudy.com
Sent: 20.05.2002 07:10
Subject: RE: ppp authentication chap callin
My understanding is "callin" is used on the *calling* router.
Then called router will authentication the calling router.
Calling router will treat the call as a "call out" and will not
authticate the called router.
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> MICHAEL J. KILPATRICK
> Sent: Sunday, May 19, 2002 6:26 PM
> To: ccarley@columbus.rr.com; ccielab@groupstudy.com
> Subject: Re: ppp authentication chap callin
>
>
> Use the CALLIN option on the called router to allow one-way
> authentication. If the called router does not have the CALLIN
> option, the called router will attempt to authenticate back to
> the calling router (ie. 2-way authentication). Play with it with
> deb ppp neg and deb ppp auth.
>
> Mike
>
>
> >>> "Charles Carley" <ccarley@columbus.rr.com> 05/19/02 11:28 AM >>>
> I am having trouble understanding the ppp chap authentication
> callin command
> from what I am finding in the archives. I understand what the
> command does,
> I am just not clear on how to implement it. Does someone have
> the relevant
> configurations from a working scenario they could share? Thank you.
>
> Charles
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:59:02 GMT-3