
Configuring Dial Services
16-2
308621-14.00 Rev 00
Note that when you configure a PPP connection using Site Manager, it creates a
generic PPP line record that all pools use for identification.
To identify remote callers, you enter the caller name and CHAP secret or PAP
password of each remote caller in the caller resolution table. Then, assign a local
demand, primary, or bandwidth circuit to each caller.
The authentication process starts during link negotiation. The remote caller
includes its CHAP name or PAP ID in the CHAP challenge or PAP authenticate
request to the called router. When the called router receives the call, it checks its
caller resolution table for a matching entry. If the remote caller is authorized, the
called router activates the assigned circuit.
For more information about authentication, see Chapter 5, “Implementation Notes
for All Dial Services.”
Caller Resolution for Demand Circuit Groups
The router also uses the caller resolution table for demand circuit groups. Demand
circuit groups can only receive calls. For a demand circuit group to accept an
incoming call, you configure the table and assign the demand circuit group to a
remote caller. After the router authorizes a remote caller, it activates a circuit from
the assigned demand circuit group.
Like individual demand circuits, demand circuit groups use either PAP or CHAP
for authentication. You can enable either of these authentication protocols on only
one side of the link (one-way authentication) or on both sides of the link (two-way
authentication). For information about authentication, see “PPP Authentication”
on page 5-1
Depending on a network’s security requirements, each remote router can have a
unique CHAP name or PAP ID, or the routers can use the same name. For each
remote caller using a unique name or ID, you assign a demand circuit group in the
caller resolution table (referred to as the local group in Site Manager). The remote
callers may use the same local group.
When the router authenticates an incoming call, it receives the caller’s name or ID
in the CHAP challenge or PAP authenticate request message. The router verifies
the caller’s identity, then looks up the assigned local group in the table. From this
group, the router selects an available circuit and activates the unnumbered
protocol configuration over that circuit.
Comentarios a estos manuales