From: omar parihuana (omar.parihuana@gmail.com)
Date: Sat Dec 13 2008 - 22:24:15 ARST
Hi,
Before I tried to configure unidirectional PAP authentication using the
Cisco document, but I couldn't establish the PPP auth. I think that Cisco
doc will be useful if you use a BRI interface like the example. After some
tests I modified the conf and finally it works.
Server Side: (it works with PPP over FR too) notice that ppp auth pap
callin is configured in this side (for me makes sense)
!
username ciscopap password 0 cisco123
!
!
interface Serial0/1
ip address 150.1.13.1 255.255.255.0
encapsulation ppp
ppp authentication pap callin
!
Client Side:
!
interface Serial0/0
ip address 150.1.13.3 255.255.255.0
encapsulation ppp
ppp pap sent-username ciscopap password 0 cisco123
end
Rgds.
On Thu, Dec 11, 2008 at 2:37 AM, CCIE expert <aronccie@gmail.com> wrote:
> Hello Group
>
> Looking at
>
> http://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186a0080093c6f.shtml
>
> It says that PAP can be setup for unidirectional Authentication. I looked
> through the archives and Googled it but I am not sure why I cant get
> unidirectional PAP authentication over frame-relay to work. Any help would
> be much appreciated,
>
> R1 config
> username Rack1R2 password 0 cisco
> !
> !
> no crypto isakmp ccm
> !
> !
> !
> !
> interface FastEthernet0/0
> no ip address
> shutdown
> duplex auto
> speed auto
> !
> interface Serial1/0
> no ip address
> encapsulation frame-relay
> frame-relay map ip 192.168.1.2 102 broadcast
> frame-relay interface-dlci 102 ppp Virtual-Template12
> no frame-relay inverse-arp
> !
> !
> interface Virtual-Template12
> ip address 192.168.1.1 255.255.255.0
> ppp authentication pap callin
> ppp pap sent-username Rack1R1 password 0 cisco
> !
>
> R2 config
> username Rack1R1 password 0 cisco
> !
> !
> no crypto isakmp ccm
> !
> !
> !
> !
> interface FastEthernet0/0
> no ip address
> shutdown
> duplex auto
> speed auto
> !
> interface Serial1/0
> no ip address
> encapsulation frame-relay
> frame-relay map ip 192.168.1.1 201 broadcast
> frame-relay interface-dlci 201 ppp Virtual-Template21
> no frame-relay inverse-arp
> !
> !
> interface Virtual-Template21
> ip address 192.168.1.2 255.255.255.0
> ppp authentication pap
> !
>
> Rack1R1#debug pp auth
> PPP authentication debugging is on
> Rack1R1#
> *Mar 1 00:33:14.435: Vi2 PPP: Authorization required
> Rack1R1#
> *Mar 1 00:33:16.435: Vi2 PPP: Authorization required
> Rack1R2#debug ppp auth
> PPP authentication debugging is on
> Rack1R2#
> *Mar 1 00:33:11.631: Vi2 PPP: Authorization required
> Rack1R2#
> *Mar 1 00:33:13.499: Vi2 PPP: Authorization required
>
> Rack1R1#debug ppp neg
> *Mar 1 00:34:13.295: Vi2 LCP: Failed to negotiate with peer
> *Mar 1 00:34:13.299: Vi2 PPP: Sending Acct Event[Down] id[325]
> *Mar 1 00:34:13.303: Vi2 LCP: O TERMREQ [ACKsent] id 21 len 4
> *Mar 1 00:34:13.307: Vi2 PPP: Phase is TERMINATING
> *Mar 1 00:34:13.395: Vi2 LCP: I TERMACK [TERMsent] id 21 len 4
> *Mar 1 00:34:13.399: Vi2 LCP: State is Closed
> *Mar 1 00:34:13.399: Vi2 PPP: Phase is DOWN
> *Mar 1 00:34:13.403: Vi2 PPP: Phase is ESTABLISHING, Passive Open
> *Mar 1 00:34:13.407: Vi2 LCP: State is Listen
> *Mar 1 00:34:14.691: Vi2 LCP: I CONFREQ [Listen] id 56 len 14
> *Mar 1 00:34:14.695: Vi2 LCP: AuthProto PAP (0x0304C023)
> *Mar 1 00:34:14.695: Vi2 LCP: MagicNumber 0x012D1338 (0x0506012D1338)
> *Mar 1 00:34:14.699: Vi2 LCP: O CONFREQ [Listen] id 22 len 14
> *Mar 1 00:34:14.699: Vi2 LCP: AuthProto PAP (0x0304C023)
> *Mar 1 00:34:14.703: Vi2 LCP: MagicNumber 0x002D456D (0x0506002D456D)
> *Mar 1 00:34:14.707: Vi2 LCP: O CONFACK [Listen] id 56 le
>
> Thank you,
> Aron
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
-- Omar E.P.T ----------------- Certified Networking Professionals make better Connections!Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:08 ARST