www.howtonetwork.org

CCNA & CCNP Certifcation Training

  • About
  • Contact
  • FAQ
  • Join
  • Home
  • CCNA
    • ICND1
    • ICND2
    • 101 CCNA LABS
  • CCNP
    • ROUTE
    • SWITCH
    • TSHOOT
    • 101 CCNP LABS
  • CompTIA
    • Security+
    • Network+
  • Design
    • CCDA
    • CCDP
You are here: Home / 101 CCNA LABS / Wide Area Networks Solutions / Lab 24 Solution: PPP Authentication using CHAP – Method 1

Lab 24 Solution: PPP Authentication using CHAP – Method 1

Task 1:

For reference information on configuring hostnames, please refer to:

Lab 20 Configuration and Verification Task 1

Lab 21 Configuration and Verification Task 1

Task 2:

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#int s0/0

R2(config-if)#clock rate 1000000

R2(config-if)#end

R2#

R2#show contr s0/0

Interface Serial0/0

Hardware is PowerQUICC MPC860

DCE V.35, clock rate 1000000

R1#show controllers serial 0/0

Interface Serial0/0

Hardware is PowerQUICC MPC860

DTE V.35 TX and RX clocks detected.

R1#

Task 3:

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#int s0/0

R2(config-if)#encapsulation ppp

R2(config-if)# ip add 192.168.50.34 255.255.255.224

R2(config-if)#end

R2#

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#int s0/0

R1(config-if)#encapsulation ppp

R1(config-if)#ip add 192.168.50.33 255.255.255.224

R1(config-if)#end

R1#

Task 4:

For reference information on verifying Serial encapsulation, please refer to:

Lab 21 Configuration and Verification Task 5

Lab 22 Configuration and Verification Task 5

R1#ping 192.168.50.34

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.50.34, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

R2#ping 192.168.50.33

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.50.33, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms

Task 5:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#username R2 password CHAP

R1(config)#int s0/0

R1(config-if)#ppp authentication chap

R1(config-if)#end

R1#

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#username R1 password CHAP

R2(config)#int s0/0

R2(config-if)#ppp authentication chap

R2(config-if)# ^Z

R2#

NOTE: By default, there is no need to configure a hostname to be used for CHAP authentication on Cisco IOS routers as they will use the hostname configured on the router. There is also no need to define a password to be used for authentication since CHAP does not send the passwords across the link like PAP. Therefore, a hash will be created using the configured passwords in the username command. These passwords must be identical on both routers, otherwise authentication will fail!

Task 6:

R1#debug ppp authentication

PPP authentication debugging is on

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#interface serial0/0

R1(config-if)#shutdown

*Mar  1 03:04:40.496: %LINK-5-CHANGED: Interface Serial0/0, changed state to administratively down

*Mar  1 03:04:41.497: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to down

R1(config-if)#no shutdown

*Mar  1 03:04:48.292: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up

*Mar  1 03:04:48.292: Se0/0 PPP: Using default call direction

*Mar  1 03:04:48.292: Se0/0 PPP: Treating connection as a dedicated line

*Mar  1 03:04:48.292: Se0/0 PPP: Session handle[A3000003] Session id[5]

*Mar  1 03:04:48.292: Se0/0 PPP: Authorization required

*Mar  1 03:04:48.300: Se0/0 CHAP: O CHALLENGE id 1 len 23 from “R1”

*Mar  1 03:04:48.300: Se0/0 CHAP: I CHALLENGE id 1 len 23 from “R2”

*Mar  1 03:04:48.304: Se0/0 CHAP: Using hostname from unknown source

*Mar  1 03:04:48.304: Se0/0 CHAP: Using password from AAA

*Mar  1 03:04:48.304: Se0/0 CHAP: O RESPONSE id 1 len 23 from “R1”

*Mar  1 03:04:48.308: Se0/0 CHAP: I RESPONSE id 1 len 23 from “R2”

*Mar  1 03:04:48.308: Se0/0 PPP: Sent CHAP LOGIN Request

*Mar  1 03:04:48.312: Se0/0 PPP: Received LOGIN Response PASS

*Mar  1 03:04:48.312: Se0/0 PPP: Sent LCP AUTHOR Request

*Mar  1 03:04:48.316: Se0/0 PPP: Sent IPCP AUTHOR Request

*Mar  1 03:04:48.316: Se0/0 CHAP: I SUCCESS id 1 len 4

*Mar  1 03:04:48.316: Se0/0 LCP: Received AAA AUTHOR Response PASS

*Mar  1 03:04:48.320: Se0/0 IPCP: Received AAA AUTHOR Response PASS

*Mar  1 03:04:48.320: Se0/0 CHAP: O SUCCESS id 1 len 4

*Mar  1 03:04:48.324: Se0/0 PPP: Sent CDPCP AUTHOR Request

*Mar  1 03:04:48.324: Se0/0 PPP: Sent IPCP AUTHOR Request

*Mar  1 03:04:48.328: Se0/0 CDPCP: Received AAA AUTHOR Response PASS

*Mar  1 03:04:49.322: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

R1(config-if)#end

*Mar  1 03:04:55.308: %SYS-5-CONFIG_I: Configured from console by console

R1#undebug all

All possible debugging has been turned off

Prev

Next

About Us

This is a free bonus site for members of www.howtonetwork.com

Copyright

The content on this copyright Reality Press Ltd.
Copyright Reality Press Ltd.