
Configuring Dial Services
5-4
308621-14.00 Rev 00
The receiving router can use PAP and CHAP in a single line pool. If router A
rejects the CHAP challenge, and router B has the PAP Fallback parameter
enabled, router B switches to PAP and retries authentication. If PAP Fallback is
not enabled, the connection is activated.
Configuring the Type of Authentication
Configuring outbound authentication determines the type of authentication the
router uses. You enable outbound authentication to use two-way authentication
and disable it to use one-way authentication. To set this parameter, see the
appropriate chapter for configuring circuits.
Using CHAP Names and PAP IDs for Authentication
Authentication occurs before the routers establish a connection. The router at one
or both ends of the connection must agree on the CHAP name and secret or PAP
ID and password so PPP can identify the caller and activate the correct circuit.
Figure 5-3
shows an example of routers using CHAP for authentication. PAP
works in a similar way. This example uses two-way authentication.
Figure 5-3. Routers Using CHAP for Authentication
Router A
Router B
Router C
PPP link between Router A and Router B
Dial
device
Dial
device
Dial
device
DS0019A
Local CHAP Name: Branch_A
Local CHAP Name: Branch_B
Local CHAP Name: Branch_C
Branch_C 13
Router A
Caller resolution table
Branch_B
27
Caller Name
Local Circuit
Router B
Caller resolution table
Branch_A
Caller Name
Local Circuit
5
Comentarios a estos manuales