Configure the CISCO router CHAP authentication configuration for PPP authentication

This article describes in detail how to configure PPP authentication and CHAP authentication, and provides the command line for configuration. You can learn about the configuration process through the instance.

When configuring PPP verification, select PAP and CHAP. PAP is the user name and password for the plain text transfer, which is not secure. CHAP uses hash values for verification. Passwords are not transmitted online, so the security is high.

CHAP certification is also the basic configuration required for the PPP teaching of CCNA courses. Its configuration is as follows:

Topology: RA DTE--------DCE (RB)

--------------------------------------

RA # conf t

RA (config) # username RB password hello

RA (config) # int s0

RA (config-if) # encap ppp

RA (config-if) # ppp au chap

RA (config-if) # end

-------------------------------

Router (config) # host RB

RB (config) # username RA password hello

RB (config) # int s0

RB (config-if) # encap ppp

RB (config-if) # ppp auth chap

% LINK-3-UPDOWN: Interface Serial0, changed state to up

% LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to up

------------------------------------------------------

RA # sh int s0

Serial0 is up, line protocol is up ------- Layer 2 UP

Hardware is HD64570

Internet address is 1.1.1.1/30

MTU 1500 bytes, BW 1544 Kbit, DLY 1000 usec, rely 255/255, load 1/255

Encapsulation PPP, loopback not set, keepalive set (10 sec)

LCP Open ----------- Open

Open: IPCP, CDPCP ----------- Open

Last input 00:00:00, output 00:00:00, output hang never

Last clearing of show interface counters never

Queueing strategy: fifo