From: Pierre-Alex Guanel (paguanel@gmail.com)
Date: Thu Dec 11 2008 - 12:34:01 ARST
Hi
Remove "ppp authentication pap callin" on R1 and give it a try
Regards
PA
On Thu, Dec 11, 2008 at 7:37 AM, CCIE expert <aronccie@gmail.com> wrote:
> Hello Group
>
> Looking at
>
> http://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186a0080093c6f.shtml
>
> It says that PAP can be setup for unidirectional Authentication. I looked
> through the archives and Googled it but I am not sure why I cant get
> unidirectional PAP authentication over frame-relay to work. Any help would
> be much appreciated,
>
> R1 config
> username Rack1R2 password 0 cisco
> !
> !
> no crypto isakmp ccm
> !
> !
> !
> !
> interface FastEthernet0/0
> no ip address
> shutdown
> duplex auto
> speed auto
> !
> interface Serial1/0
> no ip address
> encapsulation frame-relay
> frame-relay map ip 192.168.1.2 102 broadcast
> frame-relay interface-dlci 102 ppp Virtual-Template12
> no frame-relay inverse-arp
> !
> !
> interface Virtual-Template12
> ip address 192.168.1.1 255.255.255.0
> ppp authentication pap callin
> ppp pap sent-username Rack1R1 password 0 cisco
> !
>
> R2 config
> username Rack1R1 password 0 cisco
> !
> !
> no crypto isakmp ccm
> !
> !
> !
> !
> interface FastEthernet0/0
> no ip address
> shutdown
> duplex auto
> speed auto
> !
> interface Serial1/0
> no ip address
> encapsulation frame-relay
> frame-relay map ip 192.168.1.1 201 broadcast
> frame-relay interface-dlci 201 ppp Virtual-Template21
> no frame-relay inverse-arp
> !
> !
> interface Virtual-Template21
> ip address 192.168.1.2 255.255.255.0
> ppp authentication pap
> !
>
> Rack1R1#debug pp auth
> PPP authentication debugging is on
> Rack1R1#
> *Mar 1 00:33:14.435: Vi2 PPP: Authorization required
> Rack1R1#
> *Mar 1 00:33:16.435: Vi2 PPP: Authorization required
> Rack1R2#debug ppp auth
> PPP authentication debugging is on
> Rack1R2#
> *Mar 1 00:33:11.631: Vi2 PPP: Authorization required
> Rack1R2#
> *Mar 1 00:33:13.499: Vi2 PPP: Authorization required
>
> Rack1R1#debug ppp neg
> *Mar 1 00:34:13.295: Vi2 LCP: Failed to negotiate with peer
> *Mar 1 00:34:13.299: Vi2 PPP: Sending Acct Event[Down] id[325]
> *Mar 1 00:34:13.303: Vi2 LCP: O TERMREQ [ACKsent] id 21 len 4
> *Mar 1 00:34:13.307: Vi2 PPP: Phase is TERMINATING
> *Mar 1 00:34:13.395: Vi2 LCP: I TERMACK [TERMsent] id 21 len 4
> *Mar 1 00:34:13.399: Vi2 LCP: State is Closed
> *Mar 1 00:34:13.399: Vi2 PPP: Phase is DOWN
> *Mar 1 00:34:13.403: Vi2 PPP: Phase is ESTABLISHING, Passive Open
> *Mar 1 00:34:13.407: Vi2 LCP: State is Listen
> *Mar 1 00:34:14.691: Vi2 LCP: I CONFREQ [Listen] id 56 len 14
> *Mar 1 00:34:14.695: Vi2 LCP: AuthProto PAP (0x0304C023)
> *Mar 1 00:34:14.695: Vi2 LCP: MagicNumber 0x012D1338 (0x0506012D1338)
> *Mar 1 00:34:14.699: Vi2 LCP: O CONFREQ [Listen] id 22 len 14
> *Mar 1 00:34:14.699: Vi2 LCP: AuthProto PAP (0x0304C023)
> *Mar 1 00:34:14.703: Vi2 LCP: MagicNumber 0x002D456D (0x0506002D456D)
> *Mar 1 00:34:14.707: Vi2 LCP: O CONFACK [Listen] id 56 le
>
> Thank you,
> Aron
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:08 ARST