RE: TCP/UDP port for CHAP [7:74480]

2003-08-30 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port.  CHAP is handled in the PPP
protocol between the client and the router.  The router may use some other
type of authentication (RADIUS, TACACS+, etc) to authenticate the user to
some outside security server, but the CHAP communications is carried over
the PPP connection...

Fred Reimer - CCNA

Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050

NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Thomas N [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 29, 2003 5:31 AM
To: [EMAIL PROTECTED]
Subject: TCP/UDP port for CHAP [7:74480]

I got SOHO sites with PPPoE connection to the Internet.  They use CHAP for
authentication.  I would like to setup an ACL to filter out traffic on the
outside interface.  I am wondering what TCP/UDP port CHAP protocol use?
Thanks!

Thomas
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74536&t=74480
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port.  CHAP is handled in the PPP
protocol between the client and the router.  The router may use some other
type of authentication (RADIUS, TACACS+, etc) to authenticate the user to
some outside security server, but the CHAP communications is carried over
the PPP connection...

Fred Reimer - CCNA

Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050

NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Thomas N [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 29, 2003 5:31 AM
To: [EMAIL PROTECTED]
Subject: TCP/UDP port for CHAP [7:74480]

I got SOHO sites with PPPoE connection to the Internet.  They use CHAP for
authentication.  I would like to setup an ACL to filter out traffic on the
outside interface.  I am wondering what TCP/UDP port CHAP protocol use?
Thanks!

Thomas
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74506&t=74480
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread [EMAIL PROTECTED]
In your example,

VPDN is built over Ethernet, and there must be some kind of dialer where you
want your access-list on.

That imposes e1 ATM0 can be without access-list, the untrusted traffic, is
coming in encapsulated in PPP over E.

So within the PPP session there will be IP (dialer, say dhcp neg IP) and
that is where you want to put an incoming access-list on.

Martijn 

-Oorspronkelijk bericht-
Van: Thomas N [mailto:[EMAIL PROTECTED]
Verzonden: vrijdag 29 augustus 2003 11:31
Aan: [EMAIL PROTECTED]
Onderwerp: TCP/UDP port for CHAP [7:74480]


I got SOHO sites with PPPoE connection to the Internet.  They use CHAP for
authentication.  I would like to setup an ACL to filter out traffic on the
outside interface.  I am wondering what TCP/UDP port CHAP protocol use?
Thanks!

Thomas
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74505&t=74480
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread Thomas N
I got SOHO sites with PPPoE connection to the Internet.  They use CHAP for
authentication.  I would like to setup an ACL to filter out traffic on the
outside interface.  I am wondering what TCP/UDP port CHAP protocol use?
Thanks!

Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74480&t=74480
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html