Subject: Re: PPP with chap authentication
To: None <current-users@NetBSD.ORG>
From: Andreas Eltrich <elchy@efs.camelot.de>
List: current-users
Date: 03/07/1997 08:42:07
Martin Husemann (martin@rumolt.teuto.de) wrote:
> Is anyone successfully using CHAP to authenticate?

yes :)

> I have two connections wich allow either PAP or CHAP, both work
> with PAP and don't work with CHAP. One is to a Cisco 1003, the other
> to some kind of NetBlazer. If I understood "man pppd" right, I can
> simply do "cd /etc/ppp; mv pap-secrets chap-secrets" to switch between
> both protocols.

> Is this a incompatibilty between our pppd and the other implementation
> (the NetBlazer one seems to be quite broken, I had a real hard time to
> configure which options may and which may not be negotiated).

Using the follwing .ppprc I can connect to a NetBlazer 40i (MICA) without
any problems (my system is called "efs", the netblazer is "testblazer"):

     lock
     connect "/usr/sbin/chat -v ABORT BUSY ABORT ERROR ABORT 'NO CARRIER' \
     ABORT 'NO DIALTONE' ABORT 'NO ANSWER' '' ATZ OK ATD12345678 CONNECT" 
     modem
     crtscts
     passive
     -vj
     name efs
     ipcp-accept-local
     ipcp-accept-remote
     noipdefault
     defaultroute
     /dev/ser02
     57600

my /etc/ppp/chap-secrets:

     efs testblazer topsecret

On the NetBlazer the follwing settings might be useful:

     configure ppp options efs ipcp compress off
     configure ppp options efs ipcp address on
     configure ppp options efs ipcp oldaddress off
     configure ppp protocol efs ipxcp off
     configure ppp protocol efs atcp off
     configure ppp protocol efs nbfcp off
     configure ppp protocol efs multilink off
     configure ppp compress efs off
     user command efs "configure ip vj $USER off"

I've swiched off VJ header compression on both sides because there still
seems to be some buggy code on the NetBlazer.

The above settings asume that you want the NetBlazer to assign the IP
address to your system (using "configure ip pool ...")

Hope this helps a little bit.

Bye, Elchy

-- 
 Andreas Eltrich - Munich, Germany
 Voice/Tape: +49-89-54379757 - Fax/Data: +49-89-54379758