Thursday, 18 October 2007

PPPoE session authentication PAP and CHAP

The same story but pppoe session must be authorized

A) pppoe authorized using pap
here R3 (client) sends pap username and password and R4 authorizes him
note !!! R3 accepts connection from R4 without any consideration

one line added to client interface configuration:

#R3

!
interface Dialer1
ip address negotiated
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer persistent
ppp pap sent-username test password 0 test
!

On the server
#R4

!
aaa new-model
!
!
aaa authentication ppp ppp_local local
aaa authentication ppp list1 local
!
username test password 0 test
!
interface Virtual-Template2
ip unnumbered Loopback0
peer default ip address pool test_01
ppp authentication pap ## we are authetticating client using pap
!
ip local pool test_01 150.1.34.2

Please look at previous configuration for compleate configuration script!!!

A.1) now i am authetticating both sides (server author client and client author server)
R4#
!
username R3 password 0 CISCO
!
interface Virtual-Template1
ip address 10.10.10.1 255.255.255.0
no peer neighbor-route
peer default ip address dhcp-pool test_01
ppp authentication pap
ppp pap sent-username R4 password 0 CISCO
end

R3#
!
username R4 password 0 CISCO
!
!interface Dialer1
mtu 1492
ip address dhcp
encapsulation ppp
dialer pool 1
dialer persistent
ppp authentication
pap ppp pap sent-username R3 password 0 CISCO
end

B) pppoe authorized using chap

#R3

!
interface Dialer1
ip address negotiated
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer persistent
ppp chap hostname testaz
ppp chap password 0 testaz
!

On the server
#R4

!
aaa new-model
!
!
aaa authentication ppp chap_local loca
aaa authentication ppp list1 local
!
username testaz password 0 testaz
!
interface Virtual-Template2
ip unnumbered Loopback0
peer default ip address pool test_01
ppp authentication chap chap_local
!
ip local pool test_01 150.1.34.2

Please look at previous configuration for compleate configuration script!!!

No comments: