PPP PAP Authentication CHAP Authentication

"Experiment Name"

PPP PAP Certification

"Experimental Purpose"

Mastering the process and configuration of PPP PAP certification

"Background description"

You are the company's network administrator, the company in order to meet the growing business needs, the application of a dedicated line access, your customer

The client router authenticates with the ISP when it negotiates the link, configures the router to ensure that the link is established, and considers its security

Of

"Demand Analysis"

Security validation is ensured during link negotiation. The user name and password are transmitted in clear text when the link is negotiated.

650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M01/8A/DB/wKiom1g9QzWQFJ2fAACBVQWlsO4143.png "title=" 1.PNG " alt= "Wkiom1g9qzwqfj2faacbvqwlso4143.png"/>

"Experimental Equipment"

Router (with serial port) 2 units

v.35 Cable (DTE/DCE) 1 pair

"Experimental principle"

The PPP protocol is located at the data link layer of the OSI seven layer model, and the PPP protocol is divided into two sub-layers according to function: LCP,

Ncp. LCP is mainly responsible for the negotiation, establishment, callback, authentication, data compression, multilink bundling and other functions of the link.

The NCP is primarily responsible for negotiating with upper-level protocols to provide services for network-layer protocols.

The authentication function of PPP refers to the authentication of the password in the process of establishing the PPP link, verifying that by establishing the connection,

Verify that the link is not removed by removing it.

The PPP protocol supports two authentication methods, PAP and CHAP. PAP (Password authentication Protocol,

Password Authentication protocol) refers to verifying that both parties complete the verification process through two handshakes, which is a

A method for authenticating a user on a Point protocol server. The authentication request is initiated by the authenticated party, which contains the validated

User name and password. A reply is made after validation by the verifier, either through validation or validation failure. During the authentication process, the user name and secret

The code is transmitted on the link in clear text mode.

"Experimental Steps"

Configuring PAP Authentication

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M00/8A/DC/wKiom1g9RyDgdjX9AABIIykvj0c173.png "title=" 1.PNG " alt= "Wkiom1g9rydgdjx9aabiiykvj0c173.png"/>

Verifying PAP Certification

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/8A/D8/wKioL1g9R4nRVAK3AABUv_NCc-w427.png "title=" 3.PNG " alt= "Wkiol1g9r4nrvak3aabuv_ncc-w427.png"/>

CHAP Authentication

"Experimental principle"

The PPP protocol is located at the data link layer of the OSI seven layer model, and the PPP protocol is divided into two sub-layers according to function: LCP,

Ncp. LCP is mainly responsible for the negotiation, establishment, callback, authentication, data compression, multilink bundling and other functions of the link.

The NCP is primarily responsible for negotiating with upper-level protocols to provide services for network-layer protocols.

The authentication function of PPP refers to the authentication of the password in the process of establishing the PPP link, verifying that by establishing the connection,

Verify that the link is not removed by removing it.

CHAP (Challenge Handshake Authentication Protocol, Challenge Handshake Authentication Protocol) refers to the

Verify that both parties complete the verification process with three handshakes, which is more secure than PAP. The challenge message is initiated by the authenticator and is

The validator answers. Throughout the verification process, the information passed on the link is encrypted.

"Experimental Steps"

Configure CHAP

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M01/8A/DC/wKiom1g9SSuCpHPDAAAaS7K9534142.png "style=" float: none; "title=" 6.PNG "alt=" Wkiom1g9ssucphpdaaaas7k9534142.png "/>

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M01/8A/D8/wKioL1g9SSvAWO8wAAAFM37c9fk968.png "style=" float: none; "title=" 5.PNG "alt=" Wkiol1g9ssvawo8waaafm37c9fk968.png "/>

Verifying CHAP Authentication

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M02/8A/D8/wKioL1g9SXKzP1_aAAA4vPq7JNs573.png "style=" float: none; "title=" 7.PNG "alt=" Wkiol1g9sxkzp1_aaaa4vpq7jns573.png "/>

650) this.width=650; "src=" Http://s2.51cto.com/wyfs02/M01/8A/DC/wKiom1g9SazSNuBqAABcKwKEqPw103.png "title=" 8.PNG " alt= "Wkiom1g9sazsnubqaabckwkeqpw103.png"/>

PPP PAP Authentication CHAP Authentication