Re: unidirectional ppp authentication on serial interface

From: Ovidiu Neghina (o.neghina@gmail.com)
Date: Sun Jun 17 2007 - 12:02:18 ART


Hi
I did that and it does not work.
The only configuration that works for R3 ----- R2 with R3 doing
authentication and R2 being authenticated is this:
R3 :
username R2 password 0 CISCO
interface Serial0/2/1
 ip address 10.0.0.3 255.0.0.0
 encapsulation ppp
 no peer neighbor-route
 clock rate 2000000
 ppp authentication pap
 ppp direction callin
end

R2
interface Serial0/1/1
 ip address 10.0.0.2 255.0.0.0
 encapsulation ppp
 ppp authentication pap callin
 ppp direction callout
 ppp pap sent-username R2 password 0 CISCO
end

Ovi

On 6/17/07, Edison Ortiz <edisonmortiz@gmail.com> wrote:
>
> You must remove
>
> ppp authentication pap callin
>
> from R2.
>
> __
>
> Edison Ortiz
> (Routing & Switching, CCIE # 17943)
>
>
>
> ----- Original Message -----
> From: "Ovidiu Neghina" <o.neghina@gmail.com>
> To: "Cisco certification" <ccielab@groupstudy.com>
> Sent: Sunday, June 17, 2007 9:51 AM
> Subject: unidirectional ppp authentication on serial interface
>
>
> > Hi dear all.
> > I have R2----------R3 connected through a serial link. I want only R3
> to
> > authenticate R2.
> >
> >
> > R3#sh run | i user
> > username R2 password 0 CISCO
> > R3#
> >
> > R3#sh run int ser 0/2/1
> > Building configuration...
> >
> > Current configuration : 123 bytes
> > !
> > interface Serial0/2/1
> > ip address 10.0.0.3 255.0.0.0
> > encapsulation ppp
> > clock rate 2000000
> > ppp authentication pap
> > end
> >
> > R2#sh run int ser 0/1/1
> > Building configuration...
> >
> > Current configuration : 153 bytes
> > !
> > interface Serial0/1/1
> > ip address 10.0.0.2 255.0.0.0
> > encapsulation ppp
> > ppp authentication pap callin
> > ppp pap sent-username R2 password 0 CISCO
> > end
> >
> >
> >
> > It does not work. At debug ppp negotiation it says
> > R3#sh log | i PPP
> > *Jun 17 13:44:54.955: Se0/2/1 PPP: Authorization required
> > R3#
> > I have read
> >
> http://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186a0080093c6f.shtml
> > where unidirectional authentication is explained but over BRI
> > interfaces...
> > I think unidirectional ppp authentication is only for dial enviroment
> and
> > will not work for this setup.
> >
> > Could you confirm this please ?
> >
> > best regards
> > Ovi
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Jul 01 2007 - 17:24:49 ART