RE: ISDN PAP authentication problem

From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Fri Aug 08 2003 - 03:16:32 GMT-3


Reset the pap password under the dialer interface on R5 to cisco and it
should work. It looks like there are some extra characters after cisco in
the password.

ppp pap sent-username R5 password cisco

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Alec
Pun
Sent: Thursday, August 07, 2003 10:51 PM
To: ccielab@groupstudy.com
Subject: ISDN PAP authentication problem

Hi group,

I am trying PAP authentication over ISDN and hit into some problem. One
side R5 is using dialer profile whereas the other one R6 is using legacy
configuration. However, ISDN connection can't be established because of the
PAP authentication failure.

I've tried both sides using legacy configuration and it works. Grateful if
any one can give me some hints, thanks.

regards,
alec
------------------------------------------------------------------------

hostname R5
!
!
username R6 password 0 cisco

interface BRI0
 no ip address
 encapsulation ppp
 dialer pool-member 1
 isdn switch-type basic-net3
 isdn spid1 81049306240101
 isdn spid2 81049306250101
 ppp pap sent-username R5 password 7 030752180500
!
interface Dialer1
 ip address 1.1.1.5 255.255.255.0
 encapsulation ppp
 dialer pool 1
 dialer remote-name R6
 dialer string 4930622
 dialer-group 1
 pulse-time 0
 ppp authentication pap
 ppp pap sent-username R5 password 7 104D000A061852
!
dialer-list 1 protocol ip permit

hostname R6
!
!
username R5 password 0 cisco

interface BRI0
 ip address 1.1.1.6 255.255.255.0
 encapsulation ppp
 dialer-group 1
 isdn switch-type basic-net3
 isdn spid1 81049306220101
 isdn spid2 81049306230101
 ppp authentication pap
 ppp pap sent-username R6 password 7 030752180500
!
ip classless
ip http server
!
dialer-list 1 protocol ip permit
!

R5#ping 1.1.1.6

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.6, timeout is 2 seconds:

1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
1d20h: %DIALER-6-BIND: Interface BR0:1 bound to profile Di1
1d20h: BR0:1 PPP: Treating connection as a callout
1d20h: BR0:1 PAP: O AUTH-REQ id 44 len 14 from "R5"
1d20h: BR0:1 PAP: I AUTH-NAK id 44 len 27 msg is "Authentication failure"
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down.
1d20h: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di1
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
1d20h: %DIALER-6-BIND: Interface BR0:1 bound to profile Di1
1d20h: BR0:1 PPP: Treating connection as a callout
1d20h: BR0:1 PAP: O AUTH-REQ id 45 len 14 from "R5"
1d20h: BR0:1 PAP: I AUTH-NAK id 45 len 27 msg is "Authentication failure"
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down.
1d20h: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di1
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
1d20h: %DIALER-6-BIND: Interface BR0:1 bound to profile Di1
1d20h: BR0:1 PPP: Treating connection as a callout
1d20h: BR0:1 PAP: O AUTH-REQ id 46 len 14 from "R5"
1d20h: BR0:1 PAP: I AUTH-NAK id 46 len 27 msg is "Authentication failure"
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down.
1d20h: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di1
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
1d20h: %DIALER-6-BIND: Interface BR0:1 bound to profile Di1
1d20h: BR0:1 PPP: Treating connection as a callout
1d20h: BR0:1 PAP: O AUTH-REQ id 47 len 14 from "R5"
1d20h: BR0:1 PAP: I AUTH-NAK id 47 len 27 msg is "Authentication failure"
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down.
1d20h: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di1
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
1d20h: %DIALER-6-BIND: Interface BR0:1 bound to profile Di1
1d20h: BR0:1 PPP: Treating connection as a callout
1d20h: BR0:1 PAP: O AUTH-REQ id 48 len 14 from "R5"
1d20h: BR0:1 PAP: I AUTH-NAK id 48 len 27 msg is "Authentication failure"
1d20h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down.
Success rate is 0 percent (0/5)
R5#
1d20h: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di1



This archive was generated by hypermail 2.1.4 : Tue Sep 02 2003 - 18:53:55 GMT-3