From: Persio Pucci (persiopucci@uol.com.br)
Date: Mon Sep 30 2002 - 10:43:05 GMT-3
Ayman,
no, what I mean is that I did a "sh run" and copied that username line, then
did a "conf t" and pasted the very same line (always checking for spaces at
the end of the line). Then I did the same thing for the other router. When I
did that, it worked fine.
I had the ppp chap configuration all ready on both sides...
Persio
----- Original Message -----
From: "Ayman Hamza" <ayhamza@cisco.com>
To: <ccielab@groupstudy.com>; <persiopucci@uol.com.br>
Sent: Monday, September 30, 2002 10:38 AM
Subject: Re: PPP CHAP Password
>
> Persio;
>
> The username that must be configured for authentication in the global
> mode and the hostname configured in the dialer map statement must
> match the hostname configured in the "ppp chap hostname" is any on the
remote
> PPP peer. If no "ppp chap hostname" is configured on remote peer, then
> autheticate it with its router hostname . PLS review my e-mail I have
> sent to the alias just before you.
>
> By the way, I didn't understand your statement :
>
> -------------------
>
> > After a while, I copied and pasted the very same user configuration on
each
> > router,
>
> ----------
>
> What do you mean by very same user configuration?? Do you mean same
> username on both ends in the command: username <usr> password <pwd>!!!!!
>
>
> -Ayman
>
>
> > From nobody@groupstudy.com Mon Sep 30 15:29:50 2002
> > From: "Persio Pucci" <persiopucci@uol.com.br>
> > To: <ccielab@groupstudy.com>
> > Subject: Re: PPP CHAP Password
> > Date: Mon, 30 Sep 2002 10:01:16 -0300
> > MIME-Version: 1.0
> > Content-Transfer-Encoding: 7bit
> > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> > X-ASK-Info: Whitelist match
> > Sender: nobody@groupstudy.com
> > Reply-To: "Persio Pucci" <persiopucci@uol.com.br>
> >
> > Guys,
> >
> > let me ask you one thing about PPP CHAP passwords, once you are already
in
> > the topic... last week, I was doing some lab pratices and I had to
config a
> > line backup, where it had PPP encaps and needed CHAP auth, just like
Soile's
> > Skynet... I configured both ends wit the same password (plain, no
encryp)
> > with the users using the opposite router's hostname, as it is supposed
to
> > be.
> >
> > Anyway, when I tried to switch to this backup link, it did not work, I
got
> > the "MD compare failed" message. I went through both configs, the
usernames
> > where right, and the passwords did match, but it would just not work.
> >
> > After a while, I copied and pasted the very same user configuration on
each
> > router, and voila, it worked right away, and the interface went up.
> >
> > Can somebody explain why it did not work on first try, but when I
applied
> > that again it worked fine?
> >
> > Persio
> >
> > ----- Original Message -----
> > From: "Gregory W. Posey Jr." <gposey@uaes.org>
> > To: "'Michael Snyder'" <msnyder@revolutioncomputer.com>; "'Jaksec Nick'"
> > <Nick.Jaksec@acs-inc.com>
> > Cc: <ccielab@groupstudy.com>
> > Sent: Monday, September 30, 2002 9:17 AM
> > Subject: RE: PPP CHAP Password
> >
> >
> > > Actually, it's not about transposing passwords. Without using ppp
chap
> > > hostname command, the router defaults to using its own hostname and
the
> > > configured password.
> > >
> > > So your example below works as long as the passwords match...
> > >
> > > Router1(config)# username router2 password cisco
> > > Router2(config)# username router1 password cisco
> > >
> > > The routers don't need to have a username & password entry for its own
> > > hostname (e.g. Router1(config)# username router1 password cisco).
> > >
> > > As for the original question, does the remote router have the username
&
> > > password pair that is configured as the ppp chap hostname & password
> > > under the interface in the "host" end router?
> > >
> > > Thank you,
> > > Greg Posey Jr.
> > > CCIE #7981
> > > CSS1, CCSE
> > > CCNP - Voice Access
> > > M.S. EE
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> > > Michael Snyder
> > > Sent: Wednesday, September 25, 2002 10:05 AM
> > > To: 'Jaksec, Nick'
> > > Cc: ccielab@groupstudy.com
> > > Subject: RE: PPP CHAP Password
> > >
> > > I don't know why this works, but I do know it does work as listed
below.
> > >
> > > With CHAP.
> > >
> > > Router 1
> > > User router1 pass 0 pass1
> > > User router2 pass 0 pass2
> > >
> > > Router 2
> > > User router1 pass 0 pass2
> > > User router2 pass 0 pass1
> > >
> > > Basically your transpose the passwords on one of the routers.
> > >
> > > With PAP.
> > >
> > > Router 1
> > > User router1 pass 0 pass1
> > > User router2 pass 0 pass2
> > >
> > > Router 2
> > > User router1 pass 0 pass1
> > > User router2 pass 0 pass2
> > >
> > > You don't transpose the passwords with pap, just a one to one
> > > relationship.
> > >
> > >
> > > Also I always use a ppp alternative host name command, so I don't have
> > > to worry about the router's name. Basically, I cut and paste the
above
> > > to the routers, name them router1 and router2 using the ppp
alternative
> > > host name command and it works.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> > > Jaksec, Nick
> > > Sent: Tuesday, September 24, 2002 1:00 PM
> > > To: ccielab@groupstudy.com
> > > Subject: PPP CHAP Password
> > >
> > > When setting the hostname and password under the BRI interface (PPP
CHAP
> > > Hostname & PPP CHAP Password) it does not authenticate to the neighbor
> > > router. I am placing the username and password on the remote router to
> > > the
> > > hostname and password correctly but it will not accept the new
password.
> > > Does anybody have any suggustions ??
This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:44:07 GMT-3