From: Scott Morris (swm@emanon.com)
Date: Fri Aug 18 2006 - 17:15:16 ART
While I don't have any direct knowledge about their labs, I can answer you
generically on the technology side.
The command 'ppp authentication chap' is only needed on the side that is
going to issue the challenge. A router will always respond to a challenge
(at least if it has a matching username for the first router, or a 'ppp chap
hostname'/'ppp chap password' command set).
Try your original way, and then the way they have in the solutions but use a
"debug ppp authentication" while the interface comes up. Watch the
exchanges for each one, then compare them!
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPExpert VP - Curriculum Development
IPExpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
trevelle@wowway.com
Sent: Friday, August 18, 2006 4:10 PM
To: ccielab@groupstudy.com
Subject: one way chap authentication
I am working on internetworkExpert lap 4 HDLC/PPP portion. The task at hand
is for R5 to request that R4 authenticate VIA PPP with a MD5 hash value that
represent the password CISCO. I got it to work using the current config, but
the configuration guide does not use ppp chap password 0 CISCO command on
R4. When I take the command out the ser 0/1 interfaceS goes down. Am I
missing something?
R5
username Rack1R4 password 0 CISCO
interface Serial0/1
ip address 141.1.45.5 255.255.255.0
encapsulation ppp
ppp authentication chap
R4
username Rack1R5 password 0 CISCO
interface Serial0/1
ip address 141.1.45.4 255.255.255.0
encapsulation ppp
ppp chap password 0 CISCO
end
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART