PPP Authentication Protocols PAP and Chap | Kentrox AI232 specification

AI232 Version 9.6x User’s Guide

AI232 Local Menu System: Identifying AI232 Menu System Security Options

PPP Authentication Protocols (PAP and CHAP)

All asynchronous and synchronous PPP links are configurable to use either PAP or CHAP PPP authentication protocols. PAP establishes peer identity using a 2-way handshake that is done only upon initial link establishment. CHAP performs a 3-way handshake upon initial link establishment, then proceeds to verify the link with 3-way handshakes at random intervals. CHAP also encrypts the user’s password over the PPP link to provide added security.

3-3

Image 37

Kentrox AI232 manual PPP Authentication Protocols PAP and Chap

Contents

AI232 Port High Speed Asynchronous Line Card User’s Guide Page About this Document Document Conventions Laser Danger Tip Ground Caution Proper Cooling Caution Electrostatic Discharge Caution FCC Warning Web Site Support Customer AssistanceEmail Support Phone Support Table of Contents System Configuration Link Configuration TID Multiplexing Diagnostics for TID Multiplexing TOC-5 Appendix a AI232 Crash Codes AI232 Commands AI232 Menu Aliases FTP Sessions Product Description Features System Diagnostics Standalone Configuration AI232 Hardware Components Ports 17-24 Connector Ports 25-32 ConnectorPorts 9-16 Connector Ports 1-8 Connector Component Description Technical Specifications Description Specification Specifications for DP232-19/23Distribution Panels Model DP232-19/23 DCD Pin Assignments Signal Model DP232-RJ45 Installation ProcedureConnect to the AI232 Ports Places Pin Signal Specifications for DP232-RJ45 Parts List Install the mounting flanges in the desired locationDescription Quantity Cable CAB467 Places DP232-RJ45 Asynchronous to TCP/IP Application Typical Applications Illustrates a modem multiplexer application Modem Multiplexer Application Using the AI198 Menu System Accessing the Menu System Menu Numbering Structure Navigating the Menu SystemTypes of Menu Items Submenus Data TogglesMenu re-appears with the entered IP address Menu Item Descriptions FunctionsMenu Item Description Exiting the Menu System AI232 Local Menu System Radius Authentication Multilevel User Name and Password SecurityTACACS+ Authentication Identifying AI232 Menu System Security Options PPP Authentication Protocols PAP and Chap Logging Into AI232 Using a Telnet Connection for Login Consecutive failed login attempts Using an Asynchronous Port for Login Number of consecutive failed login attempts Accessing the Local Menu System Identifying Types of Menu Items Navigating the Local Menu SystemData Entry Items Direction Keys Toggle Items Send Accessing the Help Menu Save the changes Exiting the Local Menu System AI232 Version 9.6x User’s Guide System Configuration Destination Menu Break Sequence General System Properties ConfigurationDescription Format Menu Item Type Configuration in the AI198 Menu System Configuration in the AI232 Local Menu System Ethernet Port SettingsToggle for both menu items This menu item sets the FTP server port number FTP Port This example displays 16 FTP port number set to IP Settings Menu Item Types System Prompt Access the System MenuThis item sets the system prompt value in the CLI Toggle TCP SettingsTo on This item sets the Telnet port value for AI232 Telnet Port This example displays Telnet Port set to Server Settings Radius Configuration Enabled FALLBACK. The default is Disabled To configure the shell/FTP Radius option Access MenuShell/FTP Options Enabled TACACS+ Configuration Shell/FTP Options 00049 Authentication Traps Snmp ConfigurationAI232 Local Menu Item Configuration Data for all menu items Community Names WriteComm Menu Following example displays Node Information Contact Persons Snmp Manager 10.65.32.4 IP Address Settings Static Route Configuration Inactivity Timeout TID to Modem Mux ConfigurationFollowing are available Initialization String This example displays Inactivity Timeout set to This example displays Init String set to conn23 Port Bit SettingsToggle for all menu items TID to Route AI232 Local Menu Item Configuration Daylight Savings Time Time Configuration Settings Sntp SettingsAccess the Time Menu located under the System Menu This following example displays Time Zone AI232 Version 9.6x User’s Guide Link Configuration AI232 Link Types AI232 has 3 configurable link typesAsynchronous Asynchronous PPP Modem Multiplexer Access Menu For 02 Alias, enter 2, and the alias name Connect Options ConfigurationAlias Link Type Availability This example displays 02 Alias set to async.4.1 Call Retry Interval This example displays 03 Call retry interval set to Connect String 00134 Connection settings are configured using three menu items Connection SettingsDefault is OFF Is on 00030 Link Application Login Disconnect Inactivity Timer Settings Disconnect Options ConfigurationDisconnect inactivity timer when the link receives a call Off. The default is On This example displays Select on or OFF. The default is on This example displaysIs Off Disconnect settings are configured using two menu items Disconnect SettingsDefault is on Disconnect String Disconnect Auto Disable Error Limit General Link Properties ConfigurationAsync, AsyncPPP, and ModMux Flow Control Link Description Access the Link MenuThis example displays SW Flow Control set to XonXoff This menu item defines a description for a link Link Number Link State This menu item enables or disables a linkThis example displays 01 Link number set to Link Type This example displays Link state set to Disabled Async and AsyncPPP Port Data Bits This example displays Port data bits set to Seven Port Parity This example displays Port parity set to Odd Port SpeedThis menu item defines the baud rate for a port Data in the AI232 local menu system Menu 4.2.14.12.5 appears Port Stop Bits Xon Repeat Interval This example displays 10 Xon Repeat interval set to Ipcp Address Settings General PPP Properties ConfigurationFollowing menu items are available for PPP configuration AsyncPPP and ModMux Ipcp Address Parameters Set to Maximum Unit Settings For an Ipcp network control protocol Network Control Protocol Ipcp Modem String Modem Option Configuration Dialing Time-out Interval This example displays Dialing time-outset to Number of Dial Attempts This example displays Number of dial attempts set to Modem Setup Menu Local Authentication Settings PPP Authentication Configuration PAP RAS Option This example displays RAS Option set to RADIUS/Fallback Remote Authentication Settings Chap DTR State Configuration RTS/DTR Lead Control Configuration RTS State Configuration Flow Control DTR connect state Off DTR disconnect state TID Multiplexing Overview AI232 Version 9.6x User’s Guide Configuring the Parent Alias TID Multiplexing ConfigurationMenu appears Values are 1 to Destination TidforAI232 Defines the terminal identifier for AI232 Configuring the Children Aliases During the parent alias configuration TIDtid For Alias name, enter Example ConfigurationsSecond child connection YES Alias Edit Menu Alias Name 172.16.30.61#6001 PARENT1.1 Alias Edit Menu Alias Name Parameters TID Multiplexing TroubleshootingNormal Response Format Response Item Description Normal Response Example Error Response Format Error Response Example Diagnostics for TID MultiplexingErrcde AI232 Version 9.6x User’s Guide Alias and Call Routing Configuration Incoming Outgoing Asynchronous TCP/IP CallCall DownstreamAI232 Card B IP address Upstream AI232 Version 9.6x User’s Guide Configuring an Alias in the AI198 Menu System Configuring an AliasCall Routing AI232 Version 9.6x User’s Guide AI232 Version 9.6x User’s Guide Configuring an Alias in the AI232 Menu System For Display Alias in Destination Menu, select Yes or No Source/Destination Protocol Tables Source Source Destination Menu Item InformationMenu Item Information TCP/IP Source With Telnet Breaks AI198 TCP/IP Source Without Telnet Breaks AI198Async with Async break Asynchronous Source With Breaks AI232 Asynchronous Source Without Breaks AI232Telnet break Example asy.3 TCP/IP Source Without Telnet Breaks AI232 TCP/IP Source With Telnet Breaks AI232 Module Types Protocol Processing Modules Return followed by a line feed Specify up to 16 characters To zero, this option is turned offCharacters. The packet module accepts only one -S parameter Seconds Provides TL1 packetizing and sets the packetizing timer toFeed and delete Provides TL1 packetizing and prevents breaks from passing Provides Telnet handling, but prevents breaks from being Echo 1 when the connection is initiated. Initiates will SGAPropagated upstream Echo and will SGA Alias Macros Start SymbolsAlias Macro Components Constants CommentsVariables Variable Value Operators Wildcard SymbolsOperator Description Alias Macro Function Description of Operation Greater than the length of string, the function Match any of the expressions, then default isReturns the entire string Returns the length of string Configuration Examples Alias Macro Configuration =LA,PA,’#’,1-1=MYIP1 AI232 Version 9.6x User’s Guide AI232 Commands Shell Commands Commands OverviewShell Connections Establishing a Local Shell Connection Displaying winslc Command Logging Winslc CommandsEstablishing a Remote Shell Connection Log/Alarm Message Header Using winslc CommandsHeader Element Description Specifies the current date Introduces the log/alarm messageSpecifies the message severity level Specifies the line card baseport number Command Defaults Command TypeAaa account Formats Disables TACACS+ authentication Enables TACACS+ authenticationAaa authen Connections Priv-lvl Aaa author Aaa chpass Aaa fallback Enabled TACACS+ fallbackThis example displays the disabling of TACACS+ fallback Enables TACACS+ authentication with no fallback Disables TACACS+ authenticationEnables TACACS+ authentication with fallback Disabled all links Aaa profile No associations configuredProfile. Individual values are separated by commas , Specifies the name of an existing profile Aaa profile 2 newprof1 Made. Valid values are 1 to Aaa retryConnection attempt Display Item Description Aaa stats Displays the number of failed TACACS+ authorization Displays the number of TACACS+ authorizationAuthorization instead of the TACACS+ server Where AI232’s system log was used for accounting Aaa summary Displays the TACACS+ authorization method for the AI232 Displays the status of FTP access as AAA TACACS+Per-command based on per-command request/reply handling Displays the TACACS+ accounting status of user login events TACACS+ server when a connection attempt is made. Valid Aaa timeoutResets the timeout value to its default Values are 1 to Command Type shell Formats Alarm This example displays all system alarms in group links This example displays all alarms by severity level This example displays alarms for links 5-8in group links This example displays the unmasking of alarm group links Arp Command Types Column Description 172.16.30.117 Break 232break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 To reset error counters for links 1, 2, CresetReset error counters for links 1 Example, 1,2-3 to reset error counters for links 1, 2, Date Debug This example displays the enabling of all debug data logging Delete This command deletes a specified file that resides on AI232Filename Defines the name of the file to delete This example displays the deletion of file log.txt Diag-conn Displays details for that connection This option prompts for the ID of the connection to viewPattern 1, Logic 2, and Pattern 3 are evaluated before Logic 4 and Pattern 5 are considered Diag-eth Using Interpretation Mode Using the Help Option Adds a filter Following formats apply to filtersDeletes a filter Defines the source address MAC, IP, or TCP/UDP Defines the TCP/UDP port number regardless MAC/IP address settingsAdds or deletes a specific protocol filter. Available Protocol filters are This example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of all filters This example displays the deletion of filter protocol tcp Diag-info Displays the name of the Streams resource Last resetDisplays the number of free or available Streams resources Display Displays the link number Connection to be enabledDisplays the state of the driver. Two states are available Specifies that the link is not established Displays the number of frame length violations Had CRC errorsReceived packets Displays the number of short received frames Connection Displays the number of frames received onDisplays the number of bytes received on Displays the number of times transmitted frames Displays the number of transmit errors that have occurred Does not indicate an errorDisplays the number of frames received on the connection Displays the number of bytes received on the connection Displays the number of alignment errors ErrorsExcessive deferral timer is exceeded. An excessive deferral Error is recorded when the following events occur Displays the current state of the Ethernet interface. Ethernet interface needs to be resetFollowing values may appear Ethernet interface is uninitialized Option Function Diag-line Diag-line Displayed as Ascii String Only present in data packets, then the data byte count is Baseport Defines the baseport number for AI232 Diag-tconn This example displays all available files Dir This example displays an exit from the current shell session Exit Defines the number of lines to display. The default is This command displays the first few lines of a fileHead Defines the name of the file to display This example displays help information for command show This example displays a list of all available commandsHelp Formats Examples This command displays the current user name and profileThis example displays the current user name and profile This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 232 Disables the serial links Enables the serial linksLink Restarts the serial links This example displays the stopping of links 6 This example displays the starting of links 1 through 4 Log This command turns the display of log messages on or off Logout This command closes a shell sessionThis example displays the closing of a shell session This command displays a list of available files Menu This command accesses the AI232 main menu systemThis example displays the AI232 Main Menu Modmux Displays the phone number that was dialed 232more log.txt More Panic This command forces AI232 to crash dump and haltWinslc Baseport Defines the AI232 baseport number Passwd This command changes an existing user’s password Ping Pppstatus IP address of AI232 if the link status is Running Displays one of the following Profile Defines the name of a command to associate with a user Adds commands to a profile and optionally adds writeAdds write permission for a command that otherwise would Deletes commands from a user profile This example displays PVC information for link Pvclist Column Description This command resets AI232 ResetThis example displays the resetting of AI232 Router Ipaddress Defines the IP address of the default router Usage Notes Specifies the option that deletes a configuration file Configuration fileSelcnf Extension Sholog PDisplays the content of the file one page at a time Show Displays the IP address, subnet mask, and high IP address Displays the default and backup gateway IP addressDisplays the version number of AI232 Displays the date and time Staeia This command displays the status of the EIA leadsLead is negated DCD Standalone This example displays the current standalone mode status Staslc Displays the number of parity errors Is asserted and means the signal is negatedDisplays the number of framing errors Displays the number of overrun errors Syncflash Tacacs info Tacacs server Specifies a server number or range of server numbers. Valid Tacacs server ipDefines the server IP address 0.0 Tacacs server phase Tacacs server phase 1-5,8 disable account Defines the TCP port number for the TACACS+ servers. Valid Tacacs server portValues are 1 through TCP port Tacacs server secret No secret configured Tacacs server summary Associated servers are enabled + or disabledDisplays the server numbers. The +/ signs indicate if Displays the TACACS+ shared secrets passwords for specified This example displays a TACACS+ debug log file Tacacs sholog Tacacs stats When AI232 attempted to read a packet from the TACACS+ Displays the number of errors that occurred when AI232Were received when AI232 attempted to read them from Server that had a sequence number that was out of order Tail This command displays the last few lines of a fileSpecifies that a line number value will be entered This example displays the last 20 lines of file log.txt Tcpoutconn Default is This example changes the telnet port to port Telnet Downloads a file from the Tftp server TftpUploads a file to the Tftp server Defines the IP address of the Tftp server to which the file File name is specified, the file will have the same name as Defines the name of the source file after it has beenSource file Special characters Tftpboot 113 Timezone 115 Type Defines the file for which you want to view the contentsDisplays text from the file one page at a time Defines the source file to copy Update Uptime Profilename Permission Useradd Retrieve status or to change the configuration Specifies a user who can login into AI232 and accessDestination at login. The destination is specified when Permission is assigned Userdel Users Who Is 1 to 120 seconds Xon-interval This appendix provides information about AI232 crash codes AI232 Crash Codes Crash Codes Error Code Description Hexadecimal DecimalCommon Crash Codes AI232 Crash Codes System Failure Crash Reports Kentrox Technical Support AI232 Version 9.6x User’s Guide Standalone Mode and Switch Mode Downloading Software for a Standalone AI232 Standalone ModeAt the FTP prompt, open AI232 Transfer the software image to AI232 Configuring BOOTP/TFTP Downloading Software for AI232 in Switch Mode Switch ModeAt the FTP prompt, open AI198 Transfer the software image to AI198 Winslc baseport update AI232 Version 9.6x User’s Guide Commands for AI232 TACACS+ Server Enhancements Following keyword lets users access destinations AI232 Commands Menu Menulink AI232 Menu Aliases Provides FTP read access Following AI232 keywords apply to FTP accessFTP Sessions Acronym Meaning Challenge-Handshake Authentication Protocol Command and Control InterfaceCommand Line Interface Border Gateway Protocol Dynamic Host Configuration Protocol Channel Service UnitDomain Name Service Digital Service Unit End System File Transfer, Access, and ManagementElectrostatic Discharge End System to Intermediate System Internet Service Provider Integrated Services Digital NetworkLink Access Protocol Balanced Link State Update Network Service Access Point Nonservice AffectingOperations, Administration, Maintenance, and Provisioning Multimode Fiber Optic Cable Private ID or password Password Authentication ProtocolPlain Old Telephone Service QoS Quality of Service Serial Alarm Module Remote Network Monitoring SpecificationService Advertisement Protocol Switching Center Control System Terminal Access Controller Access System Switched Virtual ConnectionTID Address Resolution Protocol Time Division Multiple Access Xerox Network Services XML Key Management SpecificationUnshielded Twisted Pair Virtual Channel