Archive for July, 2015

In this tutorial we will learn how to configure CHAP on Cisco Routers.But before we start configuring it we must know what CHAP is and why we configure it.CHAP is an authentication scheme used by Point to Point Protocol  servers to validate the identity of remote clients. It periodically verifies the identity of the client by using a three-way handshake. The verification is based on a shared secret (such as the client user’s password).
  1. One of important feautures of  CHAP is that it doesn’t only require the client to authenticate itself at startup time, but sends challenges at regular intervals to make sure the client hasn’t been replaced by an intruder, for instance by just switching phone lines.

Network admins configure CHAP on routers because it provides protection against replay attacks by the peer through the use of an incrementally changing identifier and of a variable challenge-value.

Authentication through CHAP is  more secure because it requires that both the client and server know the plaintext of the secret, although it is never sent over the network.

CHAP provides better security as compared to Password Authentication Protocol (PAP). (more…)

Advertisements

In previous lab we have learnt how to configure OSPF clear text authentication,and now in this lab we will learn how to configure OSPF MD5 authentication which more secure than clear text authentication.Configuring OSPF MD5 authentication is very similar to configuring clear-text authentication. (more…)

If you have done your CCNA,you already familiar with the term OSPF and you also know how to configure it,but if you are new to networking you can learn about ospf along with it’s configuration from my blog.Today here i am going to discuss about how to configure ospf authentication on routers.OSPF can authenticate every OSPF message. This is usually done to prevent a rogue router from injecting false routing information and therefore causing a Denial-of-Service attack.

 

Two types of authentication method that can be used are:

1. clear text authentication clear text passwords are used,which is not more secure.

2. MD5 authenticationMD5 authentication is used. This type of authentication of more secure.

IMPORTANT NOTEwith OSPF authentication turned on, routers must pass the authentication process in order to become OSPF neighbors.

Here in this Lab we will learn how to configure clear text authentication method to secure ospf messages. (more…)

In this tutorial you will learn how to configure PPP(Point to Point Protocol).

Authentication— You can use authentication to verify a router’s identity when it is connecting into your router. Options for authentication include CHAP and PAP.

Here in this lab we will learn how to configure  PAP between two routers using cisco packet tracer.

PAP is an authentication method that can be used over Point to Point links. The username and password are sent in plain text, there is no encryption or protection. If it is accepted, the connection is allowed.Password Authentication Protocol goes through two way handshake process but still it  is not considered a strong authentication protocol.  (more…)