Learning by Doing: CISCO Certified Network ... - SCN Research

04:26:16: Se0/1 PPP: Treating connection as a dedicated line
04:26:16: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up
04:26:16: Se0/1 PPP: Phase is AUTHENTICATING, by both
04:26:16: Se0/1 PAP: O AUTH-REQ id 32 len 21 from "prophet"
04:26:16: Se0/1 PAP: I AUTH-REQ id 32 len 21 from "prophet"
04:26:16: Se0/1 PAP: Authenticating peer prophet
04:26:16: Se0/1 PAP: O AUTH-ACK id 32 len 5
04:26:16: Se0/1 PAP: I AUTH-ACK id 32 len 5
04:26:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Serial0/1, changed state to up
leftist#
From the leftist router this time we see a request from “prophet” on s0/1 and then
an authorization request (meaning “Ok I found you, I accept your username and
password”). Then a couple of acknowledgements and acknowledgement of
acknowledgements and the line comes up ready to communicate!
9. Let’s turn off debugging. Use “undebug all” or “undebug ppp authentication.”
10. Let’s switch to CHAP. First, start by removing the PAP stuff:
leftist(config)#int s0/0
leftist(config-if)#ppp authentication chap
leftist(config-if)#exit
leftist(config)#no username prophet password legodoom
urvile(config)#int s0/1
urvile(config-if)#ppp authentication chap
urvile(config-if)#exit
urvile(config)#no username prophet password legodoom
One way we could do this is to use the hostnames of the routers and the enable
passwords for easy access.
leftist(config)#int s0/0
leftist(config-if)#enc ppp
leftist(config-if)#ppp authentication chap
leftist(config-if)#exit
leftist(config)#username urvile password cisco
urvile(config)#int s0/0
urvile(config-if)#enc ppp
urvile(config-if)#ppp authentication chap
urvile(config-if)#exit
urvile(config)#username leftist password cisco
But, generally we want to have remote users whose names we can input for
CHAP access to the router. This actually makes more sense and is more of a
384