Cisco Certification Introduction To ISDN Part III

Cisco Certification

Cisco Certification Central

Home | Article List | Submit An Article | Contact Us


Cisco Certification Introduction To ISDN Part III

Configuring PPP PAP Authentication

Now we know how the ISDN link comes up (interesting traffic), and some scenarios that might cause the link to stay up, we need to look at ISDN authentication schemes. The two methods Cisco certification candidates must be familiar with are PAP and CHAP.

Password Authentication Protocol (PAP) sends the username and password over the ISDN link in clear-text. Sending any passwords over any WAN link in clear-text is generally a bad idea, but it's important to know you have this option.

Regarding both PAP and CHAP, it's a common misunderstanding that each side must authenticate the other. PAP and CHAP both support bidirectional and unidirectional authentication that is, R1 can authenticate R2 without R2 necessarily authenticating R1. It's more common to use unidirectional authentication in a lab environment than a production network, but keep in mind that bidirectional authentication is an option, not a requirement.

The configurations of PAP and CHAP do have their similarities. For both, you'll configure a username/password combination in global configuration mode. Newcomers to ISDN sometimes put the local router name in for the username remember that the remote router name is the username.

The only real advantage of PAP over CHAP comes in the password configuration. Since PAP actually sends the password as a whole over the link, the two routers can send different passwords during authentication. The operation of CHAP requires that both routers use the same password, and we'll see why in tomorrow's article.

Under the BRI interface, you'll enter encapsulation ppp and ppp authentication pap. So far, your authentication scheme looks like this:



username R2 password CCNA

Int bri0

encapsulation ppp

ppp authentication pap

PAP requires an extra command at this point. The ppp pap sent-username command is required under the interface, indicating the username and password this router will be sending to the remote router.

Int bri0

encapsulation ppp



ppp authentication pap

ppp pap sent-username R1 password CISCO

I always encourage CCNA and CCNP candidates to use as many debugs as possible when working in their lab, since these commands show us how things work. For any PPP authentication, always run debug ppp negotiation before sending interesting traffic to trigger the call. Watching exactly how PAP and CHAP work give you a much better understanding of what's going on 'behind the command', and makes you a stronger candidate and a stronger networking engineer.

Tomorrow, we'll take a look at CHAP, and why routers cannot use the same password on both ends of the link.

Keep studying!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of freeCCNA andCCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages. For a FREE copy of his latest e-books, ,How To Pass The CCNA, and ,How To Pass The CCNP,, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Pass theCCNA exam with The Bryant Advantage!

 

Full List of Articles
 

Latest Cisco Certification News:

  1. Softchoice Achieves Cisco Silver Partner Status in Canada

    Softchoice Corporation , a leading North American provider of IT solutions and services, is proud to announce it has achieved Silver Certification Partner Status from Cisco Inc. The designation provides Softchoice with valuable resources to support the delivery of advanced Cisco solutions on behalf of customers across Canada.

    Read More ...

  2. MTS Allstream Achieves Cisco Master Unified Communications Specialization

    MTS Allstream Inc. is pleased to announce it has achieved the Master Unified Communications Specialization from Cisco. This specialization recognizes MTS Allstream as having fulfilled the training requirements and program prerequisites to sell, deploy and support highly sophisticated applications-based Cisco unified communications solutions.

    Read More ...

  3. Small Biz Group born of Cisco-Linksys merger

    Said Sanjeev Gupta, Linksys Channel Director APAC, "This is a win-win situation for Linksys partners because they will now have access to Cisco's channel programs and training modules which will better equip them to carry the existing Linksys products to the small and medium business (SMB) customers on an integrated platform."

    Read More ...

  4. Microsoft sues site to stop certification test leaks

    A federal court in Connecticut has ordered a certification test help-site to stop publishing Microsoft-related materials after the software maker sued the company, claiming that it was selling actual certification exam questions. In a preliminary injunction signed Thursday, U.S. District Court Judge Warren Eginton ordered Pass4sure.com and its parent company, Freetech Services, to stop ...

    Read More ...

  5. Comstor Introduces Cisco Smart Care Service in Europe, Helping Resellers Drive Next Generation Service Opportunities ...

    Westcon Group, Inc., the leading specialty distributor in networking, convergence, security and mobility, today announced it will offer Cisco Smart Care Service to the European reseller market.

    Read More ...

  6. Microsoft wins ruling on certification tests

    Pass4sure sued over certification test leaks A federal court in Connecticut has ordered a certification test help-site to stop publishing Microsoft-related materials after the software maker sued the company, claiming that it was selling actual certification exam questions.

    Read More ...

  7. Tuesday, the 19th of August 2008

    TWO local students are hoping to become Cambodia's first certified Cisco Systems trainers, according to First Cambodia (FC), a computer systems company.

    Read More ...

Cisco Certification

Cisco Certification Introduction To ISDN Part III