HI Troy
My question is,
suppose as you said, usera and userb have established a connection using
chap and Pap, now is it possible to give one set of username for chap and
another set for pap?
The config looks like this
ppp authentication chap pap
ppp chap hostname
ppp chap password
Hi Deepak,
I'm not sure if I follow. Say for example you wanted userA to connect via
CHAP and userB to connect via PAP, this would indeed be possible, but usera
and userb, could not have the same username.
Most of the ISP's that i have worked for only accept CHAP since the password
Normally you would only get one username / password., and the ISP would
configure CHAP, then PAP authentication, ie if the cllent (user) tries to
authenticate, and CHAP fails, it will then authenticate using PAP. (CHAP
Should always come first as it is the more secure authentication method
Hi Troy
Thanks for the reply
So, this would mean, there is no possibility of using one set of
username/password for CHAP and another set for PAP, i guess.
The same set of username/password for eg: cisco/cisco would be used for both
CHAP and PAP.
Regards
Deepak
Troy Leliard wrote
Hi
I am having this question.
When configuring the username and password for PAP n CHAP, i am giving
different username n password.
Is there any customer scenario where this kind of situation is there?
Also does the ISP provide different username n password for different
authentication types
With the callin option, only the one who is calling needs to authenticate
himsel.
Without it, you have to configure chap usernames and password at both ends.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48392t=48325
--
FAQ, list
My brain must have been fried last night. I just noticed that I answered the
question about callback, not callin authentication. Sorry if this caused any
confusion. I'm giving up answering questions at 2:30 in the morning.
The actuall answer to the callin question is as follows:
Callin is
When you are using the callin option, only the one who calls needs to
authenticate himsefl.
You know, when you do not conigure this option, you have to configure chap
username and password for both ends.
Regards.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48391t=48325
When using PPP callin, it occurs on the receiving device. Conceptually think
of it this way, the calling device places a call, the receiving device
receives the call, the calling device calls the initiating device back. Hope
this helps.
Carl Timm, CCIE# 7149
Message Posted at:
-
From: Carl Timm [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 09, 2002 10:54 AM
To: [EMAIL PROTECTED]
Subject: RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]
When using PPP callin, it occurs on the receiving device. Conceptually think
of it this way, the calling device places a call
one cisco doc says that the callin keyword is used on incoming or
received calls (which to me implies the CALLED router), while on another
it lists a config where it is configured on the CALLING router
actually, whatever side it's configured on, it works in my lab! still, i'm
trying to get a
the config was compiled based on a DISCUSSION a pdf, no testing 'cause i'm
looking for a cheap simulator!
-Original Message-
From: Erick B. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 24, 2002 5:26 PM
To: Mirza, Timur; [EMAIL PROTECTED]
Subject: Re: is the following pap callin cfg
PAP Using Different Passwords On Two Different Routers
on r1:
username r2 password 0 timur
!
int BRI0
ppp authentication pap
ppp pap sent-username r1 password 0 milton
on r2:
username r1 password 0 milton
!
int BRI0
ppp authentication pap callin
ppp pap sent-username r2 password 0 timur
The config is good for the pieces you posted. Is it
working or? If it's not, perhaps theres a extra space
after one of the passwords.
--- Mirza, Timur
wrote:
PAP Using Different Passwords On Two Different
Routers
on r1:
username r2 password 0 timur
!
int BRI0
ppp authentication pap
I am confused about the debug output of a simple ISDN configuration. I have
two routers R1 and R2 connecting with ISDN. R1 is using only PAP
authentication, and R2 is using CHAP PAP. Now the debug is what is throwing
me :
03:23:12: BR0 DDR: Dialing cause ip (s=180.1.113.1, d=180.1.113.3)
03
My guess, which could be totally wrong:
You have service password-encryption on, so the text after the 7 in your
password string should be encrypted. It is in your username statements,
which decrypts to cisco, but according to the configs cisco is the
encrypted password in the ppp pap sent
Hello Group,
I have 2 routers connected via S1 using ppp. I have configured the following
on both the routers:
RTD
service password-encryption
username RTA password 7 045802150C2E
ppp authentication pap
ppp pap sent-username RTD password 7 cisco
RTA
service password-encryption
username RTD
anyone knows..
when to use this command and for what purpose..?
ppp pap sent-username
[GroupStudy.com removed an attachment of type application/octet-stream which
had a name of Farhan Ahmed.vcf]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=14140t=14140
I am trying to implement a Radius dial access configuration, using
Ciscosecure 2.6 for Windows. I have noticed the following:
When I set up my NaS and AAA server for radius, the client can only be
properly authenticated with PAP. If I use chap, then apparently the NAS
refuses to authenticate
p my NaS and AAA server for radius, the client can only be
properly authenticated with PAP. If I use chap, then apparently the NAS
refuses to authenticate, and I constantly get a debug messages like peer
unable to authenticate messages. This happens even though I have checked
about a thousa
Too little info. Anyway, issue "debug ppp authentication" and see what
happens.
suaveguru wrote:
hi all
I tried to practice ppp pap authentication but
apparently it does not work , anyone knows why this is
so and how should it be done . I have successfully did
it on CHAP b
hi all
I tried to practice ppp pap authentication but
apparently it does not work , anyone knows why this is
so and how should it be done . I have successfully did
it on CHAP but not PAP
regards,
suaveguru
__
Do You Yahoo!?
Get email at your own
Hi Khalil,
Thank you and all the others for providing help on this. The command ppp pap
sent-username is the one that worked. Thanks a million to you. I am
puzzled-I was following instructions from books(won't mention which) and
none of them had this command!! Here is what I found out...very
htmlDIVHi,/DIV
DIVI have setup 2 routers with a back-to-back cable. When I setup the serial int.
with ppp encap. I can ping the other router and vice-versa. But when I setup the
username and password and add the command #ppp auth pap, the line prot. goes down. I
setupnbsp;#debug ppp nego
router and vice-versa. But when I setup the
username and password and add the command #ppp auth pap, the line prot. goes down. I
setupnbsp;#debug ppp nego and one of the debug output reads,nbsp;"Closing
connection as remote router cannot authenticate". Inbsp;made sure that the hostn
are you using the ppp pap sent username command?? Otherwise it sounds as
though the usernames and passwords may be wrong.. What is the output of the
debug ppp auth??
-Original Message-
From: Niraj Palikhey [mailto:[EMAIL PROTECTED]]
Sent: 26 March 2001 14:26
To: [EMAIL PROTECTED]; [EMAIL
The router you are dialing in, i.e. the router that is
supposed to authenticate should use the command ppp
authentication pap and username and passwords. However
the router that is dialing to should only use ppp pap
sent-username command only. i.e. without ppp
authentication pap command
Thank You!
-Original Message-
From: Sam [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 03, 2001 5:35 AM
To: Pierre-Alex
Subject: Re: From CHAP to PAP
use the pap "sent user-name" command ..to specify the user credentials it
will send to the remote router.
i dont remembe
lto:[EMAIL PROTECTED]]
Sent: Saturday, March 03, 2001 5:35 AM
To: Pierre-Alex
Subject: Re: From CHAP to PAP
use the pap "sent user-name" command ..to specify the user credentials it
will send to the remote router.
i dont remember theexact syntax.. look it up on the CD..
i remem
My two ISDN routers R1 and R2 are currently authenticating using Chap.
I wanted to change the authentication to pap, so I went to both routers
and changed "ppp authentication chap" to "ppp authentication pap"
Now the routers won't authenticate. I cannot see what I did
I just wanted to make sure I also knew how to configure the "simple"
stuff...
Pierre-Alex
-Original Message-
From: Jason Roysdon [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 02, 2001 10:48 PM
To: '[EMAIL PROTECTED]'
Subject: Re: From CHAP to PAP
Shutdown the interfaces
Shutdown the interfaces and bring them back up. Worst case, save and reload
each one.
Why would you want to use PAP instead of CHAP? It's less secure and leaves
you more vulnerable as the passwords are sent in the clear.
--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email
Hi all
I need a sample configuration to connect a Cisco 1601
to an ISP (that means Async serial interface, ppp encapsulation, ip address
for this
connection will be negotiated and pap authentication in remote router)
The sample could be a legacy DDR or a "Dial-up profiles" lik
Hi,
You're on :
Config whith username - password works for chap, and config whith ppp pap
sent-username works for pap.
Hope this helps,
Jean-Marc
On 29-Dec-00 Sam wrote:
Adam
I was able to figure out how to get it to work. I did have PAP configured on
both routers.
Username R1
Hello friends
I am trying to set up ISDN and PAP authentication on my routers and it
doesnt seem to work. Router R1 dials to R2 but then the call gets
disconnected.
If I take out the line for "ppp auth pap"
and put in "ppp auth chap" the call goes through fine and the connec
Adam
I was able to figure out how to get it to work. I did have PAP configured on
both routers.
Username R1 was configured on R2
and username R2 was configured on R1
Both had the same password "cisco"
Debug ppp auth gave absolutely no clue why it wasnt working..
Then I ran
Under the dial up networking profile, if you have
require encrypted password checked, thats CHAP.
Otherwise it's PAP.
--- Jim Bond [EMAIL PROTECTED] wrote:
Hello,
Is there anyway to select PAP or CHAP in windows
98/95?
Thanks in advance.
Jim
""Erick B."" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Under the dial up networking profile, if you have
require encrypted password checked, thats CHAP.
Otherwise it's PAP.
--- Jim Bond [EMAIL PROTECTED] wrote:
Hello,
Hello,
Is there anyway to select PAP or CHAP in windows
98/95?
Thanks in advance.
Jim
__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/
**NOTE: New CCNA/CCDA List has been formed. For more
Does someone know when PAP is preferred to CHAP?
Thank you, cvp.
___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations
When you need to have more security : remember PAP send clear text passwords
but CHAP encrypts the password and performs a challenge mechanism. PAP uses
straightforward ask and answer routine.
Cu
Geert
[EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
CHAP is always preferred to PAP, unless the NAS has been setup for PAP only -
then you have no choice.
[EMAIL PROTECTED] on 01/08/2000 16:24:49
Please respond to [EMAIL PROTECTED]
To: "groupstudy" [EMAIL PROTECTED]
cc:(bcc: Mark Vicuna/Sydney/CDM)
Subject: PAP
Do
When you are using an NT user database to authenticate your dial-in users
you can't use CHAP because NT will not recognise the encrypted CHAP
password.
Steve
CCNP
[EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Does someone know when PAP is preferred
I could be wrong, but I think that you have to use PAP with one-time
password systems like SecurID or SafeWord.
Please, correct me if I am wrong!
=
Michael W. Oliver =
mailto:[EMAIL PROTECTED] =
http://michael.gargantuan.com/ =
Page
PAP is generally preferred over CHAP for speed. Most ISP use pap on the
dial-in because authentication takes place very quickly. I am not familiar
with how you would use an NT database to authenticate a user dialing into a
Cisco device unless you were using TACACS and TACACS was using NT as it's
45 matches
Mail list logo
