Hi Christian
I can't understand why your getting this either, as you have the correct remote sides aaa username and password it should go down the list until a match is seen and pass authentication. Caveat with this is issuing the challenge which you have done both sides for two-way, also interface level commands take precedence over username and password stored in the database - not really causing an issue in your case. Can you debug ppp authentication whilst you have both sets of username and password and check why it's not working with all applied and poss post output. -- BR Tony Sent from my iPad On 21 Sep 2013, at 16:25, Rogelio Gamino <[email protected]> wrote: > You are missing a PPP command. > > Rogelio Gamino > On Sep 21, 2013 9:57 AM, "Christian Schröder" < > [email protected]> wrote: > >> Hi all, >> >> >> I have one question about PPP CHAP authentication where I don't find any >> documentation explaining the following in detail. >> >> Suppose we have two routers R7 and R8 connected directly via Back2Back >> serial and an encapsulation of PPP. >> >> As far as I understand the following applies: >> For the successful of a mutual CHAP authentication the following >> preconditions should match. >> 1. R7 knows of a password used for its authentication against R8 >> 2. R8 knows R7s password to check for successful authentication >> and vice versa. >> >> I thought for Point 1 the configuration line "ppp chap password …" is used >> And for Step 2 a normal username/password line is needed like in the >> example below. >> >> Interestingly, this does not work until I uncomment the lines preceded >> with an exclamation mark >> where the password for the router itself is configured. >> Now, I am confused about the relation between the three passwords per side >> ("username REMOTEROUTER password PW", "username THISROUTER password PW", >> "ppp chap password PW"). >> >> Why is it necessary to specify them all? >> >> >> Cheers, >> Christian >> >> >> #### On R7: >> username R8 password ipexpert >> !username R7 password ipexpert >> >> interface Serial0/0/0 >> ip address 192.168.11.5 255.255.255.252 >> encapsulation ppp >> clock rate 2000000 >> ppp authentication chap >> ppp chap password ipexpert >> >> >> >> >> #### On R8 : >> username R7 password ipexpert >> !username R8 password ipexpert >> >> interface Serial0/0/0 >> ip address 192.168.11.6 255.255.255.252 >> encapsulation ppp >> ppp authentication chap >> ppp chap password ipexpert >> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> >> http://onlinestudylist.com/mailman/listinfo/ccie_rs >> > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > http://onlinestudylist.com/mailman/listinfo/ccie_rs _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
