RE: ISDN Authentication Question

From: Henk de Tombe (henk.de.tombe@qi.nl)
Date: Wed Sep 28 2005 - 14:44:39 GMT-3


Hi,

I've looked in RFC 3748, and chapter 5.4 shows up with the following:

5.4. MD5-Challenge

   Description

      The MD5-Challenge Type is analogous to the PPP CHAP protocol
      [RFC1994] (with MD5 as the specified algorithm). The Request
      contains a "challenge" message to the peer. A Response MUST be
      sent in reply to the Request. The Response MAY be either of Type
      4 (MD5-Challenge), Nak (Type 3), or Expanded Nak (Type 254).

This would mean that EAP uses the same MD5 challenge algoritm as with the
CHAP protocol, please correct me if I'm wrong!

ftp://ftp.rfc-editor.org/in-notes/rfc3748.txt

regards,
Henk

-----Oorspronkelijk bericht-----
Van: nobody@groupstudy.com [mailto:nobody@groupstudy.com] Namens Victor
Cappuccio
Verzonden: woensdag 28 september 2005 19:23
Aan: Bajo
CC: Mitchell, TJ; ccielab@groupstudy.com
Onderwerp: Re: ISDN Authentication Question

:)
I Think as CHAP as a big Blender :D AND PAP something like Putting IN --
Spanish Translation Fix Well
Share more I like them Much
Big Dogs Realy Like Me...
Jejeje look at the default-metric in EIGRP :D

Bajo wrote:

> I always think of CHAP as "chopping" (cutting into pieces with the MD5
> knife) and PAP as "popping" (showing something up) ...hey a quick
> mnemonics :)
>
> On 9/28/05, *Victor Cappuccio* <cvictor@protokolgroup.com
> <mailto:cvictor@protokolgroup.com>> wrote:
>
> Chek it out
> http://www.cisco.com/warp/public/471/understanding_ppp_chap.html
> <http://www.cisco.com/warp/public/471/understanding_ppp_chap.html>
> http://www.cisco.com/warp/public/471/config-pap.html
>
> HTH
> Victor.
>
> Mitchell, TJ wrote:
>
> >Can you elaborate more on this, I thought that CHAP passed the
> entire
> >password it's just encrypted?
> >
> >Thanks
> >
> >T.J. Mitchell
> >
> >-----Original Message-----
> >From: Victor Cappuccio [mailto:cvictor@protokolgroup.com
> <mailto:cvictor@protokolgroup.com>]
> >Sent: Wednesday, September 28, 2005 10:07 AM
> >To: Mitchell, TJ
> >Cc: ccielab@groupstudy.com <mailto:ccielab@groupstudy.com>
> >Subject: Re: ISDN Authentication Question
> >
> >The One that passes the entire password is PAP in clear Text,
> CHAP only
> >passes the HASH of the password
> >HTH
> >
> >
> >Mitchell, TJ wrote:
> >
> >
> >
> >>I have a practice lab here asking me about this and I can't find the
> >>answer anywhere.
> >>
> >>Do any of these not pass the entire password across the link
> during the
> >>authentication process?
> >>
> >>
> >>
> >>Thanks
> >>
> >>
> >>
> >>T.J. Mitchell
> >>
> >>________________________________
> >>
> >>From: Bajo [mailto:bajoalex@gmail.com <mailto:bajoalex@gmail.com>]
> >>Sent: Wednesday, September 28, 2005 9:37 AM
> >>To: Mitchell, TJ
> >>Cc: ccielab@groupstudy.com <mailto:ccielab@groupstudy.com>
> >>Subject: Re: ISDN Authentication Question
> >>
> >>
> >>
> >>Have tried only ppp chap and ppp pap. But here are more:
> >>
> >>
> >>
> >>R4(config-if)#ppp authentication ?
> >> chap Challenge Handshake Authentication Protocol (CHAP)
> >> eap Extensible Authentication Protocol (EAP)
> >> ms-chap Microsoft Challenge Handshake Authentication Protocol
> >>(MS-CHAP)
> >> ms-chap-v2 Microsoft CHAP Version 2 (MS-CHAP-V2)
> >> pap Password Authentication Protocol (PAP)
> >>
> >>
> >>
> >>
> >>
> >>On 9/28/05, Mitchell, TJ <tmitchell@allianttech.com
> <mailto:tmitchell@allianttech.com>> wrote:
> >>
> >>Guys -
> >>
> >>I have a question on ISDN authentication.
> >>
> >>What types of authentication is there for ISDN?
> >>
> >>
> >>
> >>I know the typical PPP CHAP and PAP, but what else is there?
> >>
> >>
> >>
> >>Thanks
> >>
> >>
> >>
> >>___________________________________________
> >>
> >>T.J. Mitchell
> >>
> >>Sr. Network Engineer, CCNA, CCDA, CCNP, CCDP
> >>
> >>
> >>
> >>Alliant Technologies, LLC
> >>
> >>Boston, MA 02108
> >>
> >>Cell: 508-868-6853
> >>
> >> tmitchell@allianttech.com <mailto:tmitchell@allianttech.com>
> >>
> >>www.allianttech.com <http://www.allianttech.com>
> >>
>
>>_______________________________________________________________________
> >>Subscription information may be found at:
> >>http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >>
> >>
> >>--
> >>Kind Regards,
> >>
> >>Bajo
> >>
>
>>_______________________________________________________________________
> >>Subscription information may be found at:
> >>http://www.groupstudy.com/list/CCIELab.html
> <http://www.groupstudy.com/list/CCIELab.html>
>
>



This archive was generated by hypermail 2.1.4 : Sun Oct 02 2005 - 14:40:16 GMT-3