Zte ZXR10 GER, Руководство пользователя

Страница: 158 / 412

ZXR10 GER (V2.6.03) General Excellent Router User Manual Volume-I
136 Confidential and Proprietary Information of ZTE CORPORATION
Example: As shown in Figure 74 , pos3_3/1 interface of router
R1 is connected to pos3_3/1 of router R2. PAP authentication
mode is used. User name and password configured on each
interface are used for local and remote authentication. User
names and passwords at both ends must be consistent with each
other.
F
I G U R E
7 4 P
P P
C
O N F I G U R A T I O N
E
X A M P L E
R1 R2
Pos3_3/1
Pos3_3/1
192.168.1.1/30
192.168.1.2/30
Configuration of R1:
ZXR10_R1(config)#interface pos3_3/1
ZXR10_R1(config-if)#ip address 192.168.1.1 255.255.255.252
ZXR10_R1(config-if)#ppp authentication pap
ZXR10_R1(config-if)#
ppp pap sent-username pap user password
hello
ZXR10_R1(config-if)#ppp open
Configuration of R2:
ZXR10_R2(config)#interface pos3_3/1
ZXR10_R2(config-if)#ip address 192.168.1.2 255.255.255.252
ZXR10_R2(config-if)#ppp authentication pap
ZXR10_R2(config-if)# ppp pap sent-username pap user password
hello
ZXR10_R2(config-if)#ppp open
Challenge Handshake
Authentication Protocol (CHAP)
Challenge Handshake Authentication Protocol (CHAP) verifies the
identity of peer by means of a three-way handshake. These are
the general steps performed in CHAP.
„
LCP (Link Control Protocol) phase is complete,
„
CHAP is negotiated between both devices
„
Authenticator sends a challenge message to peer.
„
Peer responds with a value calculated through a one-way
hash function (Message Digest 5 (MD5)).
„
Authenticator checks response against its own calculation of
expected hash value. If values match, authentication is
successful. Otherwise, connection is terminated.
Background