ADTRAN 1000R Series ppp authentication [chap | eap

Command Reference Guide Demand Interface Configuration Command Set

ppp authentication [chap | eap | pap]

Use the ppp authentication command to specify the authentication protocol on the PPP virtual interface

that the peer should use to authenticate itself.

Syntax Description

chap Configu re s CHAP au th en tic at ion on th e inter face.

eap Configures EAP authentication on the interface.

pap Configures PAP authentication on the interface.

Default Values

By default, PPP endpoints have no authentication configured.

Applicable Platforms

This command applies to the NetVanta 1000R, 3000, 4000, and 5000 Series units.

Command History

Release 1.1 Command was introduced.

Release 11.1 Command expanded to include the demand interface.

Technology Review

CHAP and PAP are two authentication methods that en joy widespread support. Both methods are included

in the AOS and are easily configured.

Defining PAP

The Password Authentication Protocol (PAP) is used to verify that the PPP peer is a permitted device by

checking a username and password configured on the peer. The username and passwo rd are both sent

unencrypte d ac ro ss th e con n ec tin g pr ivat e circ uit .

PAP requires two-way message passing. First, the router that is required to be authenticated (say the peer )

sends an authentication request with it s username and password to the router requiring authentication

(say the local router). The local router then looks up the username and password in the username

database within the PPP interface, and if they match sends an authentication acknowledge back to the

peer.

The authentication method set up on the local router can be differ ent from that on the peer.

Also, just because one router requires authentication from its peer does not mean it also

has to authenticate itself to the peer.