ICND2 Chapter 12 Summary

PPP Concepts
 Definition of a header and trailer that allows delivery of a data frame over the link
 Support for both synchronous and asynchronous links
 A protocol type field in the header, allowing multiple Layer 3 protocols to pass over the same link
 Built-in authentication tools: Password Authentication Protocol (PAP) and Challenge Handshake
Authentication Protocol (CHAP)
 Control protocols for each higher-layer protocol that rides over PPP, allowing easier integration
and support of those protocols

PPP LCP Features

Function LCP Feature Description
Looped link detection Magic number Detects if the link is looped, and disables the
interface, allowing rerouting over a working route.
Error detection Link Quality Monitoring (LQM) Disables an interface that exceeds an error
percentage threshold, allowing rerouting over better
routes.
Multilink support Multilink PP Load-balances traffic over multiple parallel links.
Authentication PAP and CHAP Exchanges names and passwords so that each device
can verify the identity of the device on the other end
of the link.

CHAP Configuration
Step 1 Configure the routers’ hostnames using the hostname name global configuration command.
Step 2 Configure the name of the other router, and the shared secret password, using the username name
password password global configuration command.
Step 3 Enable CHAP on the interface on each router using the ppp authentication chap interface
subcommand.

Page 1 of 3
 ICND2 Chapter 12 Summary
Interface Status Codes
Line Status Protocol Status Likely Reason/Layer
Administratively down Down Interface is shut down
Down Down Layer 1
Up Down Layer 2
Up Up Layer 3

Troubleshooting Layer 1
 The leased line is down (a telco problem).
 The line from the telco is not plugged in to either or both CSU/DSUs.
 A CSU/DSU has failed or is misconfigured.
 A serial cable from a router to its CSU/DSU is disconnected or faulty.

Troubleshooting Layer 2
Line Status Protocol Status Likely Reason
Up Down (stable) on both ends Mismatched encapsulation commands
or
Down (stable) on one end, flapping
between up and down on the other
Up Down on one end, up on the other Keepalive is disabled on the end in an up state
Up Down (stable) on both ends PAP/CHAP authentication failure

CHAP Debug Messages

R1#debug ppp authentication
PPP authentication debugging is on
R1#
*May 21 18:26:55.731: Se0/0/1 PPP: Using default call direction
*May 21 18:26:55.731: Se0/0/1 PPP: Treating connection as a dedicated line
*May 21 18:26:55.731: Se0/0/1 PPP: Authorization required
*May 21 18:26:55.731: Se0/0/1 CHAP: O CHALLENGE id 16 len 23 from “R1”
*May 21 18:26:55.731: Se0/0/1 CHAP: I CHALLENGE id 49 len 23 from “R2”
*May 21 18:26:55.735: Se0/0/1 CHAP: Using hostname from unknown source
*May 21 18:26:55.735: Se0/0/1 CHAP: Using password from AAA
*May 21 18:26:55.735: Se0/0/1 CHAP: O RESPONSE id 49 len 23 from “R1”
*May 21 18:26:55.735: Se0/0/1 CHAP: I RESPONSE id 16 len 23 from “R2”
*May 21 18:26:55.735: Se0/0/1 PPP: Sent CHAP LOGIN Request
*May 21 18:26:55.735: Se0/0/1 PPP: Received LOGIN Response PASS
*May 21 18:26:55.735: Se0/0/1 PPP: Sent LCP AUTHOR Request
*May 21 18:26:55.735: Se0/0/1 PPP: Sent IPCP AUTHOR Request
*May 21 18:26:55.735: Se0/0/1 LCP: Received AAA AUTHOR Response PASS
*May 21 18:26:55.739: Se0/0/1 IPCP: Received AAA AUTHOR Response PASS
*May 21 18:26:55.739: Se0/0/1 CHAP: O SUCCESS id 16 len 4
*May 21 18:26:55.739: Se0/0/1 CHAP: I SUCCESS id 49 len 4

Page 2 of 3
 ICND2 Chapter 12 Summary
Command Reference
Command
encapsulation {hdlc | ppp}
ppp authentication {pap | chap | pap
chap | chap pap}
username name password secret
show interfaces [type number]
debug ppp authentication
debug ppp negotiation
Page 3 of 3
Description
Interface subcommand that defines the serial data-link protocol.
Interface subcommand that enables only PAP, only CHAP, or both (order-
dependent).
Global command that sets the password that this router expects to use when
authenticating the router with the listed hostname.
Lists statistics and details of interface configuration, including the
encapsulation type.
Generates messages for each step in the PAP or CHAP authentication
process.
Generates debug messages for the LCP and NCP negotiation messages sent
between the devices.