Zte ZXR10 2920 User Manual page 175

Chapter 8 Access Service
Process of using the PAP mode for identity authentication is
shown in Figure 30.
F 3 0 U P M F I A
I G U R E S I N G A P O D E O R D E N T I T Y U T H E N T I C A T I O N
Switch
User terminal system
RADIUS server
EAPOL RADIUS
EAPOL-Start
EAP-Request/Identity
EAP-Response/Identity
Connection setup
EAP-Request/PAP
EAP-Response/PAP Access-Request/PAP
EAP-Success Access-Accept
Successful access
CHAP CHAP is an encrypted authentication mode and avoids
transmission of user's real password upon the setup of
connection. NAS sends a randomly generated Challenge string
to user. User encrypts Challenge string by using own password
and MD5 algorithm and returns username and encrypted
Challenge string (encrypted password).
Server uses user password it stores and MD5 algorithm to
encrypt Challenge string. It compares this Challenge string
with encrypted password of the server and returns a response
accordingly.
Process of using the CHAP mode for identity authentication is
shown in
Confidential and Proprietary Information of ZTE CORPORATION 161