Lab 25:
PPP Authentication using CHAP (Method # 2)
Lab Objective:
The objective of this lab exercise is to configure two routers sharing a back-to-back Serial link encapsulated by PPP to authenticate each other using default CHAP parameters on Cisco IOS. By default, PPP connections are not authenticated or secured.
Lab Purpose:
PPP CHAP authentication configuration is a fundamental skill. One of the main reasons that PPP is so popular is because it has the capability to be secured and devices communicating using PPP can be authenticated. CHAP authentication is the most preferred method to secure PPP as it does not send usernames and passwords in clear text. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure PPP CHAP authentication.
Certification Level:
This lab is suitable for CCNA certification exam preparation
Lab Difficulty:
This lab has a difficulty rating of 6/10
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 15 minutes
Lab Topology:
Please use the following topology to complete this lab exercise:
Task 1:
Configure the hostnames on routers R1 and R2 as illustrated in the topology.
Task 2:
Enable the Serial interfaces on R1 and R2. The Serial0/0 interface on R2 is identified as the DCE in the topology. Use the appropriate show command to verify that this interface is indeed the DCE. Configure the DCE interface on R2 to providing clocking to R1. The clock speed should be 768Kbps. Verify that R1 receives clocking information from R2.
Task 3:
Enable PPP encapsulation on router R1 and R2 Serial0/0 interfaces. Configure IP addressing on R1 and R2 Serial0/0 interfaces as illustrated in the topology.
Task 4:
Verify your interface encapsulation, which should be PPP by default. Test connectivity between R1 and R2 by pinging between the routers.
Task 5:
Configure PPP CHAP authentication on R1 and R2. Configure R1 to use the CHAP username Router1 with the password MyPass. Configure R2 to use the CHAP username Router2 with the password MyPass.
Task 6:
Enable PPP authentication debugging on R1. Next, perform a shutdown followed by a no shutdown on Serial0/0. Verify that you see the two routers authenticating each other via PPP CHAP. Disable debugging when you are done.