From: Petr Lapukhov (petrsoft@gmail.com)
Date: Fri May 12 2006 - 15:45:36 ART
Dave,
I didn't check your configuration in details, but this scenario
worked pretty well with me back in days.
You should probably check "debug ppp authentication" at both sides
for more information.
Just re-labbed it.
Here is my config:
R3:
!
username R5 password 0 CISCO5
username R2 password 0 CISCO2
!
interface Virtual-Template1
ip address 172.1.235.13 255.255.255.248
ppp authentication chap pap
end
R2:
!
interface Virtual-Template1
ip address 172.1.235.14 255.255.255.248
ppp chap refuse
ppp pap sent-username R2 password 0 CISCO2
end
R5:
!
interface Virtual-Template1
ip address 172.1.235.14 255.255.255.248
ppp chap password 0 CISCO5
ppp pap refuse
---Another option would be to use two Virtual-Templates at R3 and "ip unnumbered loopback x"
---
HTH Petr
2006/5/12, Schulz, Dave <DSchulz@dpsciences.com>: > > Group - > > I am trying to do ppp over frame and having the hub (R1) authenticate > the remotes (R2 and R3). I would like to get R2 to use chap, and R3 to > use pap. Chap works great, but I cannot get pap to work on R3. If I > change R3 to chap, then it all works. It appears that the > authentication on R1, where it should skip to pap after not getting chap > info from R3 is not functioning. Actually, I am not sure that this is > even possible. Thoughts? > > R1....... > > username Router2 password 0 cisco > username Router3 password 0 cisco > ! > interface Serial0/0 > no ip address > encapsulation frame-relay > frame-relay interface-dlci 102 ppp Virtual-Template1 > frame-relay interface-dlci 103 ppp Virtual-Template1 > ! > interface Virtual-Template1 > ip address 192.168.1.1 255.255.255.0 > no peer default ip address > ppp authentication chap ppp > ! > > R2...... > > ! > username R1 password 0 cisco > ! > interface Serial0/0 > no ip address > encapsulation frame-relay > frame-relay interface-dlci 201 ppp Virtual-Template1 > ! > interface Virtual-Template1 > ip address 192.168.1.2 255.255.255.0 > ppp chap hostname Router2 > ! > > R3..... > ! > interface Virtual-Template1 > ip address 192.168.1.3 255.255.255.0 > ppp chap refuse > ppp pap sent-username Router3 password 0 cisco > ! > interface Serial0 > no ip address > encapsulation frame-relay > frame-relay interface-dlci 301 ppp Virtual-Template1 > ! > > > Dave Schulz > Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com > > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:21 ART