wan circuits€¦ · point-to-point protocol (ppp) » media independent encapsulation • serial,...

WAN Circuits

Copyright © www.ine.com

In This Section

» HDLC

» PPP • PPP Negotiation

• PPP Authentication

• PPP over Ethernet

• Misc. PPP Features

Copyright © www.ine.com

High-Level Data Link Control (HDLC)

» Default serial encapsulation

» Does not support any advanced features

» Has problems with vendor interoperability

Copyright © www.ine.com

Point-to-Point Protocol (PPP)

» Media independent encapsulation • Serial, Ethernet, Frame Relay, ATM, etc.

» Better choice for interoperability » Adds features that other layer 2 medias don’t

natively support • Authentication • Multilink • Fragmentation • Reliability • Compression

Copyright © www.ine.com

PPP Negotiation

» PPP uses Link Control Protocol (LCP) to negotiate higher layer protocols • Internet Protocol Control Protocol (IPCP) • IPV6CP • CDPCP • Etc.

» Can be used to negotiate • Address assignment • Routing information

» Verification • debug ppp negotiation

Copyright © www.ine.com

PPP Authentication

» PPP Authentication adds security to encapsulations that don’t normally support it • E.g. PPPoE over DSL/ATM with CHAP Authentication

» Multiple authentication varieties • PAP

• CHAP

• MSCHAP

• EAP

Copyright © www.ine.com

PPP Authentication Methods

» Password Authentication Protocol (PAP) • Clear text username • Clear text password

» Challenge Handshake Authentication Protocol (CHAP) • Clear text username • MD5 hashed password

» MSCHAP / MSCHAPv2 / EAP / etc…

Copyright © www.ine.com

PPP PAP Authentication

» Authentication Request • ppp authentication pap

» Authentication Response • no ppp pap refuse • ppp pap sent-username… password

» Verification • debug ppp negotiation • debug ppp authentication

Copyright © www.ine.com

PPP CHAP Authentication

» Authentication Request • ppp authentication chap

» Authentication Response • no ppp chap refuse • Usernames & Passwords • Global vs Interface

» Verification • debug ppp negotiation • debug ppp authentication

Copyright © www.ine.com

PPP over Ethernet Server

» Define PPP interface • interface virtual-template [num]

» Apply logical options • Authentication, multilink, IP address, etc.

» Define BBA Group • bba-group pppoe [name | global] • virtual-template [num]

» Bind to link • pppoe enable group [name | global]

Copyright © www.ine.com

PPP over Ethernet Client

» Define PPP interface • interface dialer [num] • encapsulation ppp • dialer pool [pool]

» Apply logical options • Authentication, multilink, IP address, etc.

» Bind to link • pppoe-client dial-pool-number [pool]

Copyright © www.ine.com All rights reserved.

Q&A