From: Ayman Hamza (ayhamza@cisco.com)
Date: Mon Sep 30 2002 - 10:38:57 GMT-3
Persio;
The username that must be configured for authentication in the global
mode and the hostname configured in the dialer map statement must
match the hostname configured in the "ppp chap hostname" is any on the remote
PPP peer. If no "ppp chap hostname" is configured on remote peer, then
autheticate it with its router hostname . PLS review my e-mail I have
sent to the alias just before you.
By the way, I didn't understand your statement :
-------------------
> After a while, I copied and pasted the very same user configuration on each
> router,
----------
What do you mean by very same user configuration?? Do you mean same
username on both ends in the command: username <usr> password <pwd>!!!!!
-Ayman
> From nobody@groupstudy.com Mon Sep 30 15:29:50 2002
> From: "Persio Pucci" <persiopucci@uol.com.br>
> To: <ccielab@groupstudy.com>
> Subject: Re: PPP CHAP Password
> Date: Mon, 30 Sep 2002 10:01:16 -0300
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-ASK-Info: Whitelist match
> Sender: nobody@groupstudy.com
> Reply-To: "Persio Pucci" <persiopucci@uol.com.br>
>
> Guys,
>
> let me ask you one thing about PPP CHAP passwords, once you are already in
> the topic... last week, I was doing some lab pratices and I had to config a
> line backup, where it had PPP encaps and needed CHAP auth, just like Soile's
> Skynet... I configured both ends wit the same password (plain, no encryp)
> with the users using the opposite router's hostname, as it is supposed to
> be.
>
> Anyway, when I tried to switch to this backup link, it did not work, I got
> the "MD compare failed" message. I went through both configs, the usernames
> where right, and the passwords did match, but it would just not work.
>
> After a while, I copied and pasted the very same user configuration on each
> router, and voila, it worked right away, and the interface went up.
>
> Can somebody explain why it did not work on first try, but when I applied
> that again it worked fine?
>
> Persio
>
> ----- Original Message -----
> From: "Gregory W. Posey Jr." <gposey@uaes.org>
> To: "'Michael Snyder'" <msnyder@revolutioncomputer.com>; "'Jaksec Nick'"
> <Nick.Jaksec@acs-inc.com>
> Cc: <ccielab@groupstudy.com>
> Sent: Monday, September 30, 2002 9:17 AM
> Subject: RE: PPP CHAP Password
>
>
> > Actually, it's not about transposing passwords. Without using ppp chap
> > hostname command, the router defaults to using its own hostname and the
> > configured password.
> >
> > So your example below works as long as the passwords match...
> >
> > Router1(config)# username router2 password cisco
> > Router2(config)# username router1 password cisco
> >
> > The routers don't need to have a username & password entry for its own
> > hostname (e.g. Router1(config)# username router1 password cisco).
> >
> > As for the original question, does the remote router have the username &
> > password pair that is configured as the ppp chap hostname & password
> > under the interface in the "host" end router?
> >
> > Thank you,
> > Greg Posey Jr.
> > CCIE #7981
> > CSS1, CCSE
> > CCNP - Voice Access
> > M.S. EE
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> > Michael Snyder
> > Sent: Wednesday, September 25, 2002 10:05 AM
> > To: 'Jaksec, Nick'
> > Cc: ccielab@groupstudy.com
> > Subject: RE: PPP CHAP Password
> >
> > I don't know why this works, but I do know it does work as listed below.
> >
> > With CHAP.
> >
> > Router 1
> > User router1 pass 0 pass1
> > User router2 pass 0 pass2
> >
> > Router 2
> > User router1 pass 0 pass2
> > User router2 pass 0 pass1
> >
> > Basically your transpose the passwords on one of the routers.
> >
> > With PAP.
> >
> > Router 1
> > User router1 pass 0 pass1
> > User router2 pass 0 pass2
> >
> > Router 2
> > User router1 pass 0 pass1
> > User router2 pass 0 pass2
> >
> > You don't transpose the passwords with pap, just a one to one
> > relationship.
> >
> >
> > Also I always use a ppp alternative host name command, so I don't have
> > to worry about the router's name. Basically, I cut and paste the above
> > to the routers, name them router1 and router2 using the ppp alternative
> > host name command and it works.
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> > Jaksec, Nick
> > Sent: Tuesday, September 24, 2002 1:00 PM
> > To: ccielab@groupstudy.com
> > Subject: PPP CHAP Password
> >
> > When setting the hostname and password under the BRI interface (PPP CHAP
> > Hostname & PPP CHAP Password) it does not authenticate to the neighbor
> > router. I am placing the username and password on the remote router to
> > the
> > hostname and password correctly but it will not accept the new password.
> > Does anybody have any suggustions ??
This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:44:07 GMT-3