local router in a response message. The local router attempts to match the remote device’s name with an
associated secret stored in the local username or remote security server database; it uses the stored secret to
encrypt the original challenge and verify that the encrypted values match.
You can enable CHAP, MS-CHAP, or PAP in any order. If you enable all three methods, the first method
specified is requested during link negotiation. If the peer suggests using the second method, or refuses the
first method, the second method is tried. Some remote devices support only one method. Base the order in
which you specify methods on the remote device’s ability to correctly negotiate the appropriate method, and
on the level of data line security you require. PAP usernames and passwords are sent as clear text strings,
which can be intercepted and reused.
To enter the dynamic template configuration mode, run dynamic-template command in the Global
Configuration mode.
If you use a list-name value that was not configured with the aaa authentication ppp command, then
authentication does not complete successfully and the line does not come up.
Note
Table 25: PPP Authentication Protocols for Negotiation, on page 379 lists the protocols used to negotiate PPP
authentication.
Table 25: PPP Authentication Protocols for Negotiation
DescriptionProtocol
Enables CHAP on an interface.chap
Enables Microsoft’s version of CHAP (MS-CHAP)
on an interface.
ms-chap
Enables PAP on an interface.pap
Enabling or disabling PPP authentication does not affect the ability of the local router to authenticate itself to
the remote device.
MS-CHAP is the Microsoft version of CHAP. Like the standard version of CHAP, MS-CHAP is used for
PPP authentication. In this case, authentication occurs between a personal computer using Microsoft Windows
NT or Microsoft Windows 95 and a Cisco router or access server acting as a network access server.
Enabling or disabling PPP authentication does not affect the local router authenticating itself to the remote
device.
Task ID
OperationsTask ID
read, writeppp
read, writeaaa
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Command Reference, Release
5.2.x
379
BNG PPP Commands
ppp authentication (BNG)
To Next Page
Loading...
Need help?
General
