PPP Authentication Profiles E-1
This appendix gives you information on determining Point-to-Point Protocol (PPP) profiles when
configuring your router.
Determining PPP Profiles
If you are dialing out into an Internet Service Provider or dialing into a central office, the use of
PAP, CHAP, or Multilink is determined by the system administrator of the ISP or central office.
You configure PPP based on the information you are given.
Otherwise, if you are responsible for both central and remote routers, you must determine the PPP
profile based on the level of security and features you need. For additional information on security
levels, refer to “Defining Security Levels,” “Password Authentication Protocol,” and “Challenge
Handshake Authentication Protocol” on page 1-8.
PPPProf not only specifies the security method, but also allows flexible connection to different
implementations of PPP. The standard combinations should suit most configurations.
When Link Control Protocol (LCP) negotiation is not supported, or the unit is not required to be an
Authenticator, then the Simple combinations should be selected. If no predefined combination is
suitable, then a Custom profile can be built to allow compatibility with a particular system.
In Simple mode, the unit responds to a PAP or CHAP Authentication Request with the Password/
Secret configured in the relevant path profile. In Standard mode, the unit acts as a PAP/CHAP
Authenticator. This mode expects the remote unit (known as the Peer) to respond with the relevant
PAP Password or CHAP response.
If calls are to be received from PPP routers that do not have paths configured in the router and CLI
is not present, the ISDN PORT configuration must reflect the type of profile to be used to
communicate with the calling router.
NGRRT210.BK Page 1 Friday, October 17, 1997 2:37 PM