HP ProCurve Secure 7000dl Series Basic Management And Configuration Manual page 315

ProCurve# debug ppp authentication
The local router is
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPtx[t1 1/1] PAP: Authen-Req
attempting to
ID=1 Len=10 PeerID(Local) Password()
authenticate
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPrx[t1 1/1] PAP: Authen-Nak
itself.
ID=1 Len=5 Message()
Figure 6-24. PAP Authentication Messages
The Authen-Req message is the message the authenticating peer sends with
its username and password. If you see such a message marked with PPPtx,
you know that your router is attempting to authenticate itself to the remote
endpoint. The PeerID and Password fields are the values that this router sends
as its username and password. When the interface receives an Authen-Nak,
as shown above, the peer has rejected these values.
In this example, the interface has not been configured to send a password.
You would need to obtain the correct username and password from your peer
and configure them in the PPP interface configuration mode context.
When the local router is the authenticator, you can check the debug messages
for the username and password the remote router is sending. Because PAP
does not use encryption, the password will be readable in plain text. (See
Figure 6-25.)
ProCurve# debug ppp authentication
2005.07.08 09:03:44 PPP.AUTHENTICATION PPPrx[t1 1/1] PAP: Authen-Req
ID=1 Len=10 PeerID(Remote) Password(procurve)
Figure 6-25. Finding the Peer's PAP Password
If you recognize the PeerID as that of a legitimate endpoint and the password
seems correct, make sure that the username and password in the PPP data-
base have been entered correctly. Enter show run interface ppp <interface
number> and look for username and password. Otherwise, contact the
remote site and inform it that it is sending the wrong password.
Configuring the Data Link Layer Protocol for E1, T1, and Serial Interfaces
Peer's username
Troubleshooting Logical Interfaces
The remote router rejects
the password.
Peer's password
6-63