I don't think you'll get ms-chap to work, as NT adds the domain onto the
front of the user id and the Cisco router has no way of handling this as far
as I know. It looks like "domain name\user-id". The only way (I know of)
to handle it is to hand off authentication from the router to an NT based
RADIUS or TACACS server that supports NT domain authentication. The domain
name will be case sensitive, so make sure it's all upper case, everywhere.
Rodgers Moore
"Piatnitchi Cristian" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all
>
> I am trying to setup an Cisco 1600 dial-up into a remote WinNT 4 RAS
server.
> No results , mainly because the NT server tryes to get authenticate in the
> router
> too (I don't know how to set a secret password on the NT box, the
debugging
> shows me just that it
> tryes to use its own host name for challenge ).
> The debugging shows me that it tries to use ms-chap.
> The pap authentication work with dial-up and a remote CISCO router but not
> with an NT box
> I enabled "any authentication including clear text" on the NT but no
> results. It continuues to
> try ms-chap.
>
> Did anybody try this combination (dila-out from a C1600 into a NT box
using
> ms-pap or chap )?
> Could you tell me how to stop the NT to try beeing authenticate into the
> Cisco router ?
>
> See below the debugging
>
> 44550: 2d04h: Se0 PPP: Treating connection as a callout
> 44551: 2d04h: Se0 PPP: Phase is ESTABLISHING, Active Open
> 44552: 2d04h: Se0 LCP: O CONFREQ [Closed] id 176 len 25
> 44553: 2d04h: Se0 LCP: ACCM 0x000A0000 (0x0206000A0000)
> 44554: 2d04h: Se0 LCP: AuthProto MS-CHAP (0x0305C22380)
> 44555: 2d04h: Se0 LCP: MagicNumber 0x1BD1406C (0x05061BD1406C)
> 44556: 2d04h: Se0 LCP: PFC (0x0702)
> 44557: 2d04h: Se0 LCP: ACFC (0x0802)
> 44558: 2d04h: Se0 PPP: I pkt type 0xC021, datagramsize 29
> 44559: 2d04h: Se0 PPP: I pkt type 0xC021, datagramsize 29
> 44560: 2d04h: Se0 LCP: I CONFREQ [REQsent] id 0 len 25
> 44561: 2d04h: Se0 LCP: ACCM 0x00000000 (0x020600000000)
> 44562: 2d04h: Se0 LCP: AuthProto MS-CHAP (0x0305C22380)
> 44563: 2d04h: Se0 PPP: I pkt type 0xC021, datagramsize 29
> 44564: 2d04h: Se0 PPP: I pkt type 0xC021, datagramsize 29
> 44565: 2d04h: Se0 LCP: MagicNumber 0x00002839 (0x050600002839)
> 44566: 2d04h: Se0 LCP: PFC (0x0702)
> 44567: 2d04h: Se0 LCP: ACFC (0x0802)
> 44568: 2d04h: Se0 LCP: O CONFACK [REQsent] id 0 len 25
> 44569: 2d04h: Se0 LCP: ACCM 0x00000000 (0x020600000000)
> 44570: 2d04h: Se0 LCP: AuthProto MS-CHAP (0x0305C22380)
> 44571: 2d04h: Se0 LCP: MagicNumber 0x00002839 (0x050600002839)
> 44572: 2d04h: Se0 LCP: PFC (0x0702)
> 44573: 2d04h: Se0 LCP: ACFC (0x0802)
> 44574: 2d04h: Se0 LCP: I CONFACK [ACKsent] id 176 len 25
> 44578: 2d04h: Se0 LCP: PFC (0x0702)
> 44579: 2d04h: Se0 LCP: ACFC (0x0802)
> 44580: 2d04h: Se0 LCP: State is Open
> 44581: 2d04h: Se0 PPP: Phase is AUTHENTICATING, by both
>
> 44584: 2d04h: Se0 CHAP: O CHALLENGE id 139 len 21 from "ciscouser"
> 44585: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 28
> 44586: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 28
> 44587: 2d04h: Se0 CHAP: I CHALLENGE id 84 len 26 from "NTbox "
> 44588: 2d04h: Se0 CHAP: Using alternate hostname rras
> 44589: 2d04h: Se0 CHAP: O RESPONSE id 84 len 58 from "ciscouser"
> 44590: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44591: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44592: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44593: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44594: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44595: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44596: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44597: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44598: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44599: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44600: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44601: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44602: 2d04h: Se0 CHAP: Using alternate hostname rras
> 44603: 2d04h: Se0 CHAP: Using alternate hostname rras
> 44604: 2d04h: Se0 CHAP: O CHALLENGE id 140 len 21 from "rras "
> 44605: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44606: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44607: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44608: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44609: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
> 44610: 2d04h: Se0 CHAP: I FAILURE id 84 len 14 msg is "E=691 R=1 "
> 44611: 2d04h: Se0 PPP: I pkt type 0xC223, datagramsize 16
>
>
> Thanks for help
> Cristian Piatnitchi
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
