Configuring CHAP Example

© 2004 Cisco Systems, Ir

Configuring CHAP is straightforward. As with the PAP example, RouterA and RouterB are connected across a network. Use the following steps as a guide to configuring CHAP authentication:

Step 1 On each of the interfaces, specify the encapsulation ppp command.

Step 2 Enable the use of CHAP authentication with the ppp authentication chap command.

Step 3 You must also configure the usernames and passwords. Use the command username username password password, where username is the hostname of the peer.

The passwords must be identical at both ends. The router name and password are case sensitive.

Router(config)# username username password password

Step 4 Configure the router with a local username/password database, using the global configuration command username username password password, or point it to a network host that has that information (such as a TACACS+ server). By default, the router uses its hostname to identify itself to the peer. Therefore, the username must match the remote host hostname.

However, if you want the router to send a different username and password, you have the option of specifying this username and password with the commands:

Router(config-if)# ppp chap hostname name

Router(config-if)# ppp chap password password

Step 5 Configure IP addresses on the interfaces.

0 0

Post a comment