3.2 PPP Authentication  
  3.2.3 PPP authentication protocols  
The authentication phase of a PPP session is optional. After the link has been established and the authentication protocol chosen, the peer can be authenticated. If it is used, authentication takes place before the network layer protocol configuration phase begins.

The authentication options require that the calling side of the link enter authentication information. This helps to ensure that the user has the permission of the network administrator to make the call. Peer routers exchange authentication messages.

When configuring PPP authentication, the network administrator can select Password Authentication Protocol (PAP) or Challenge Handshake Authentication Protocol (CHAP). In general, CHAP is the preferred protocol.