Subject: Re: PPP with chap authentication
To: None <current-users@NetBSD.ORG>
From: Andreas Eltrich <elchy@efs.camelot.de>
List: current-users
Date: 03/07/1997 08:42:07
Martin Husemann (martin@rumolt.teuto.de) wrote:
> Is anyone successfully using CHAP to authenticate?
yes :)
> I have two connections wich allow either PAP or CHAP, both work
> with PAP and don't work with CHAP. One is to a Cisco 1003, the other
> to some kind of NetBlazer. If I understood "man pppd" right, I can
> simply do "cd /etc/ppp; mv pap-secrets chap-secrets" to switch between
> both protocols.
> Is this a incompatibilty between our pppd and the other implementation
> (the NetBlazer one seems to be quite broken, I had a real hard time to
> configure which options may and which may not be negotiated).
Using the follwing .ppprc I can connect to a NetBlazer 40i (MICA) without
any problems (my system is called "efs", the netblazer is "testblazer"):
lock
connect "/usr/sbin/chat -v ABORT BUSY ABORT ERROR ABORT 'NO CARRIER' \
ABORT 'NO DIALTONE' ABORT 'NO ANSWER' '' ATZ OK ATD12345678 CONNECT"
modem
crtscts
passive
-vj
name efs
ipcp-accept-local
ipcp-accept-remote
noipdefault
defaultroute
/dev/ser02
57600
my /etc/ppp/chap-secrets:
efs testblazer topsecret
On the NetBlazer the follwing settings might be useful:
configure ppp options efs ipcp compress off
configure ppp options efs ipcp address on
configure ppp options efs ipcp oldaddress off
configure ppp protocol efs ipxcp off
configure ppp protocol efs atcp off
configure ppp protocol efs nbfcp off
configure ppp protocol efs multilink off
configure ppp compress efs off
user command efs "configure ip vj $USER off"
I've swiched off VJ header compression on both sides because there still
seems to be some buggy code on the NetBlazer.
The above settings asume that you want the NetBlazer to assign the IP
address to your system (using "configure ip pool ...")
Hope this helps a little bit.
Bye, Elchy
--
Andreas Eltrich - Munich, Germany
Voice/Tape: +49-89-54379757 - Fax/Data: +49-89-54379758