3.3 Configuring PPP  
  3.3.3 Configuring PPP authentication  
The procedure outlined in the table describes how to configure PPP encapsulation and PAP/CHAP authentication protocols.

Correct configuration is essential, since PAP and CHAP will use these parameters to authenticate.

Figure is an example of a two-way PAP authentication configuration. Both routers authenticate and are authenticated, so the PAP authentication commands mirror each other. The PAP username and password that each router sends must match those specified with the username name password password command of the other router.

PAP provides a simple method for a remote node to establish its identity using a two-way handshake. This is done only upon initial link establishment. The hostname on one router must match the username the other router has configured. The passwords must also match.

CHAP is used to periodically verify the identity of the remote node using a 3-way handshake. The hostname on one router must match the username the other router has configured. The passwords must also match. This is done upon initial link establishment and can be repeated any time after the link has been established.

 

Lab Activity

Lab Exercise: Configuring PPP Authentication

In this lab, the student will configure a serial interface on the Madrid and Tokyo routers.

   
 

Lab Activity

e-Lab Activity: Configuring PPP Authentication

In this lab, the student will configure a serial interface on the Madrid and Tokyo routers.

   
 

Lab Activity

e-Lab Activity: username name password password

In this activity, the student will demonstrate how to use the username name password password command.

   
 

Web Links

Configuring and Troubleshooting PPP Password Authentication Protocol (PAP)

http://www.cisco.com/en/US/tech/tk713/ tk507/technologies_tech_ note09186a0080093c6f.shtml