6-64
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
Troubleshooting Logical Interfaces
Figure 6-24. PAP Authentication Messages
The Authen-Req message is the message the authenticating peer sends with
its username and password. If you see such a message marked with PPPtx,
you know that your router is attempting to authenticate itself to the remote
endpoint. The PeerID and Password fields are the values that this router sends
as its username and password. When the interface receives an Authen-Nak,
as shown above, the peer has rejected these values.
In this example, the interface has not been configured to send a password.
You would need to obtain the correct username and password from your peer
and configure them in the PPP interface configuration mode context.
When the local router is the authenticator, you can check the debug messages
for the username and password the remote router is sending. Because PAP
does not use encryption, the password will be readable in plain text. (See
Figure 6-25.)
Figure 6-25. Finding the Peer’s PAP Password
If you recognize the PeerID as that of a legitimate endpoint and the password
seems correct, make sure that the username and password in the PPP data-
base have been entered correctly. Enter show run interface ppp <interface
number> and look for username and password. Otherwise, contact the
remote site and inform it that it is sending the wrong password.
ProCurve# debug ppp authentication
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPtx[t1 1/1] PAP: Authen-Req
ID=1 Len=10 PeerID(Local) Password()
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPrx[t1 1/1] PAP: Authen-Nak
ID=1 Len=5 Message()
The local router is
attempting to
authenticate
itself.
The remote router rejects
the password.
ProCurve# debug ppp authentication
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPrx[t1 1/1] PAP: Authen-Req
ID=1 Len=10 PeerID(Remote) Password(procurve)
Peer’s username
Peer’s password
To Next Page
Loading...
Need help?
General
