From: Bit Gossip (bit.gossip@chello.nl)
Date: Thu Jul 12 2007 - 17:43:02 ART
Group,
the doccd says 'EAP works much as CHAP does, except that identity
request and response packets are exchanged when EAP starts.'
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hsec_r/sec_p1h.htm#wp1138118
But if I take a plain working setup with 'ppp authentication chap' and I
change the authentication to EAP it doesn't work unless I add to both
routers: 'ppp eap password CISCO'
Who knows why I have to add that and how the authentication process
actually works?
Thanks,
bit.
working config with ppp authentication chap:
R1:
username R6 password 0 CISCO
!
interface Serial0/1
ip address 192.168.0.1 255.255.255.0
encapsulation ppp
ppp authentication chap
end
R6
username R1 password 0 CISCO
!
interface Serial0/1
ip address 192.168.0.6 255.255.255.0
encapsulation ppp
clock rate 128000
ppp authentication chap
end
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
working config with ppp authentication chap
R1:
username R6 password 0 CISCO
!
interface Serial0/1
ip address 192.168.0.1 255.255.255.0
encapsulation ppp
ppp authentication eap
ppp eap password 0 CISCO
ppp eap local
end
R6
username R1 password 0 CISCO
!
interface Serial0/1
ip address 192.168.0.6 255.255.255.0
encapsulation ppp
clock rate 128000
ppp authentication eap
ppp eap password 0 CISCO
ppp eap local
end
This archive was generated by hypermail 2.1.4 : Sat Aug 18 2007 - 08:17:40 ART