Ppp Authentication; Ppp Encryption - Option Audio GlobeSurfer 3G Reference Manual

802.11b/g wireless router and internet gateway

Table of Contents

4.6.2.3 PPP Authentication

Point-to-Point Protocol (PPP) currently supports four authentication protocols:

Password Authentication Protocol (PAP), Challenge Handshake Authentica-

tion Protocol (CHAP), and Microsoft CHAP version 1 and 2.

Please note that encryption is performed only if Microsoft CHAP, Microsoft CHAP

version 2, or both are selected.

Figure 4.94: PPP Authentication Settings

Support unencrypted password (PAP) Password Authentication Protocol (PAP)

is a simple, plaintext authentication scheme. The user name and pass-

word are requested by your networking peer in plaintext. PAP, how-

ever, is not a secure authentication protocol. Man-in-the-middle attacks

can easily determine the remote access client's password. PAP offers no

protection against replay attacks, remote client impersonation, or remote

server impersonation.

Support Challenge Handshake Authentication (CHAP) The Challenge Hand-

shake Authentication Protocol (CHAP) is a challenge-response authenti-

cation protocol that uses MD5 to hash the response to a challenge. CHAP

protects against replay attacks by using an arbitrary challenge string per

authentication attempt.

Support Microsoft CHAP Select this check box if you are communicating with

a peer that uses Microsoft CHAP authentication protocol.

Support Microsoft CHAP Version 2 Select this check box if you are commu-

nicating with a peer that uses Microsoft CHAP Version 2 authentication

protocol.

PPP supports encryption facilities to secure the data across the network con-

nection. A wide variety of encryption methods may be negotiated, although

typically only one method is used in each direction of the link.

Please note that PPP encryption can only be used with MS-CHAP or MS-CHAP-

V2 authentication algorithms.

Table of Contents