
Configuring Dial Services
5-4
117353-B Rev. 00
One-Way Authentication
Figure 5-2
on page 5-4 illustrates one-way authentication. For CHAP or PAP, the
calling router does not try to authenticate the called router, but it does recognize
and respond to CHAP challenges or PAP authentication requests from the called
router. The called router does authenticate the calling router. Using one-way
authentication, the router can communicate with other devices that may not
support two-way authentication.
Figure 5-2. One-Way Authentication
The receiving router can use PAP and CHAP in a single line pool. If Router A
rejects the CHAP challenge, and Router B has the PAP Fallback parameter
enabled, Router B switches to PAP and reattempts authentication. If PAP Fallback
is not enabled, the connection is activated.
Router A Router B
Challenge
Response match
Response
One-Way Authentication -- CHAP
Calling router
Called router
(outbound authentication disabled)
Router A Router B
Authenticate request
Authenticate response
One-Way Authentication -- PAP
Calling router
Called router
(outbound authentication disabled)
DS0031A
Comentarios a estos manuales