Cisco Certification Introduction To ISDN Part IV

Cisco Certification

Cisco Certification Central

Home | Article List | Submit An Article | Contact Us


Cisco Certification Introduction To ISDN Part IV

In part III of this ISDN primer, we learned that PPP has two main methods of authentication that Cisco certification candidates need to know how to configure: PAP and CHAP.

PAP has very few advantages over CHAP. PAP passwords are carried over the line in clear-text, which in today's world is a very bad idea. PAP configuration also requires additional configuration with the "ppp pap sent-username" command, so anyone who can see your running configuration can also see the PAP password.

The only advantage PAP has over CHAP is a slim one. With PAP, a different password can be used by the each of the routers involved in the authentication. CHAP requires that the password be the same. Why? We'll see as we examine CHAP authentication.

The First Step to Configuring CHAP

CHAP requires you to configure a username / password combination for any remote device that will be involved in authentication. (We're assuming that the routers have already been configured with their names via the global hostname command.) Both routers will use the password CISCO.

R1:

username R2 password CISCO



int bri0

encapsulation ppp

ppp authentication chap

R2:

username R1 password CISCO

int bri0

encapsulation ppp



ppp authentication chap

Why CHAP Authentication Requires The Same Password On Both Routers

Remember how PAP sends the password over the line in clear-text? CHAP does not actually send the password over the line at all. Instead, CHAP runs a hash algorithm using the password and a random number. It is the result of this hash that is passed over the link. The remote router receives the hash result, and runs the exact same algorithm. If the result is the same, the authentication attempt will be successful. If the result is different, the authentication will fail. For this reason, the passwords must be the same.

Debug The Connection If Authentication Fails

Since two passwords are involved, the chances of one of the passwords being mistyped doubles. If you configure CHAP and the link dials but drops almost immediately, there's an authentication problem. Run debug ppp negotiation and attempt to dial the line again. The output of this particular debug will show you where the problem is.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of freeCCNA andCCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages. For a FREE copy of his latest e-books, ,How To Pass The CCNA, and ,How To Pass The CCNP,, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Pass theCCNA exam with The Bryant Advantage!

 

Full List of Articles
 

Latest Cisco Certification News:

  1. Cisco, Microsoft certification boosts job and pay prospects

    Research shows top qualifications for IT staff For high-tech workers, it pays to be certified, according to research conducted by Dice Learning that shows 10 IT certifications stand out for delivering higher salaries. 

    Read More ...

  2. Cisco, Microsoft certifications increase high-tech salaries

    IT professionals with certain IT certifications could make bank compared to counterparts, according to a study of 17,000 high-tech workers conducted by Dice Learning.

    Read More ...

  3. Cisco, Microsoft certifications increase high-tech salaries

    For high-tech workers , it pays to be certified, according to research conducted by Dice Learning that shows 10 IT certifications stand out for delivering higher salaries .

    Read More ...

  4. Cisco Unveils Sponsor Line-Up at Networkers Bahrain 2010

    Dubai, UAE 9 March 2010: Cisco Cisco today unveiled details about the companies that will be sponsoring Cisco Networkers Bahrain 2010. Through sponsorship packages, industry accredited networking forum, offers companies the opportunity to increase brand visibility, generate sales leads meet new partners and showcase their products.

    Read More ...

  5. Cisco Unveils Sponsor Line-Up at Networkers Bahrain 2010

    Dubai, UAE 9 March 2010: Cisco today unveiled details about the companies that will be sponsoring Cisco Networkers Bahrain 2010. Through sponsorship packages, industry accredited networking forum, offers companies the opportunity to increase brand visibility, generate sales leads meet new partners and showcase their products.

    Read More ...

  6. Dice Learning Unveils Top 10 Pay-Boosting Certifications in Tech

    Technical certifications in fields such as project management and security boost salaries, according to a recent survey of technology professionals by Dice Learning, a service that allows technology professionals to easily obtain technical training and certifications.

    Read More ...

  7. Mountain Region Family Medicine Completes Successful EMR Deployment, Credits Regional Partners

    KINGSPORT, Tenn., March 10 /PRNewswire/ -- Mountain Region Family Medicine (MRFM) completes successful EMR deployment with the assistance of partners BCTI, Inc.

    Read More ...

Cisco Certification

Cisco Certification Introduction To ISDN Part IV