Lab 47 PPPoE Authentication CHAP

Lab 48 PPPoE Authentication CHAP

Pada lab kali ini saya akan menjelaskan tentang authentikasi CHAP pada PPPoE. sebelum kita melakukan konfigurasi CHAP kita perlu tahu apakah itu CHAP ?  CHAP atau Chalange Handshake Authentication Protocol adalah sebuah protocol authentikasi three-way-handshaking yang lebih aman daripada PAP, ini dikarenakan CHAP akan menyimpan authentikasi dan tidak akan disebarkan secara online melalui internet.

Topologi :

Untuk langkah-langkah konfigurasi adalah sebagai berikut :

• Konfigurasikan PPPoE
• Buat Username dan Password pada PPPoE Server
• Aktifkan authentikasi CHAP pada PPPoE Server
• Lakukan authentikasi pada PPPoE Client

Verifikasi :

• Lihatlah status interface apakah sudah UP atau belum
• Lakukan Ping

Konfigurasi :

Untuk konfigurasi pertama-tama konfigurasikan PPPoE pada Server maupun Client, untuk konfigurasi PPPoE silahkan lihat pada link dibawah ini 

http://tulisananakit.blogspot.co.id/2017/11/ppp-over-ethernet-cisco.html

Jika anda sudah mengkonfigurasikan PPPoE kemudian buatlah username dan password pada PPPoE Server, kemudian aktifkan authentication CHAP pada interface virtual-template 

Selanjutnya pada PPPoE Client lakukan authentikasi CHAP

Verifikasi :

Untuk verifikasi nyalakan debug PPP authentication pada PPPoE server dan PPPoE Client, kemudian coba matikan interface PPPoE lalu nyalakan kembali dan lihat apakah pada debug authentikasinya berjalan dengan baik atau tidak. Selain itu kita juga bisa lihat pada interface PPPoE apakah sudah UP atau belum jika sudah UP berarti authentikasi berjalan dengan baik. Terakhir coba lakukan ping antara PPPoE Server dan PPPoE Client.

!R-Server R-Server(config)#do debug ppp authentication PPP authentication debugging is on !R-Client R-Client(config-if)#do debug ppp authentication PPP authentication debugging is on R-Client(config-if)#sh R-Client(config-if)# *Oct 14 22:07:23.443: %DIALER-6-UNBIND: Interface Vi2 unbound from profile Di1 *Oct 14 22:07:23.447: Di1 DDR: dialer shutdown complete R-Client(config-if)# *Oct 14 22:07:23.471: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down *Oct 14 22:07:24.471: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down R-Client(config-if)#no sh R-Client(config-if)# *Oct 15 21:56:04.595: %LINK-3-UPDOWN: Interface Dialer1, changed state to up R-Client(config-if)# *Oct 15 21:56:19.707: %DIALER-6-BIND: Interface Vi2 bound to profile Di1 *Oct 15 21:56:19.707: Vi2 PPP: Using dialer call direction *Oct 15 21:56:19.711: Vi2 PPP: Treating connection as a callout *Oct 15 21:56:19.711: Vi2 PPP: Session handle[1F000014] Session id[0] *Oct 15 21:56:19.711: Vi2 PPP: Authorization required *Oct 15 21:56:19.715: Vi2 PPP: No remote authentication for call-out R-Client(config-if)# *Oct 15 21:56:19.719: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up R-Client(config-if)# *Oct 15 21:56:21.731: Vi2 PPP: No authorization without authentication *Oct 15 21:56:21.763: Vi2 CHAP: I CHALLENGE id 1 len 29 from "R-Server" *Oct 15 21:56:21.767: Vi2 CHAP: Using hostname from interface CHAP *Oct 15 21:56:21.767: Vi2 CHAP: Using password from interface CHAP *Oct 15 21:56:21.771: Vi2 CHAP: O RESPONSE id 1 len 27 from "server" *Oct 15 21:56:21.867: Vi2 CHAP: I SUCCESS id 1 len 4 R-Client(config-if)# *Oct 15 21:56:22.875: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up R-Client(config-if)# *Oct 15 21:56:31.287: %DHCP-6-ADDRESS_ASSIGN: Interface Dialer1 assigned DHCP address 10.10.10.2, mask 255.255.255.252, hostname R-Client R-Client(config-if)# R-Client(config-if)#do u all !R-server R-Server(config)# *Oct 15 21:56:19.795: ppp7 PPP: Using default call direction *Oct 15 21:56:19.795: ppp7 PPP: Treating connection as a dedicated line *Oct 15 21:56:19.795: ppp7 PPP: Session handle[7F000009] Session id[7] *Oct 15 21:56:19.795: ppp7 PPP: Authorization required R-Server(config)# *Oct 15 21:56:21.843: ppp7 CHAP: O CHALLENGE id 1 len 29 from "R-Server" *Oct 15 21:56:21.879: ppp7 CHAP: I RESPONSE id 1 len 27 from "server" *Oct 15 21:56:21.883: ppp7 PPP: Sent CHAP LOGIN Request *Oct 15 21:56:21.887: ppp7 PPP: Received LOGIN Response PASS *Oct 15 21:56:21.919: Vi1.1 PPP: Sent LCP AUTHOR Request *Oct 15 21:56:21.923: Vi1.1 PPP: Sent IPCP AUTHOR Request *Oct 15 21:56:21.927: Vi1.1 LCP: Received AAA AUTHOR Response PASS *Oct 15 21:56:21.927: Vi1.1 IPCP: Received AAA AUTHOR Response PASS *Oct 15 21:56:21.931: Vi1.1 CHAP: O SUCCESS id 1 len 4 R-Server(config)# !R-Client R-Client(config-if)#do sh ip int br Interface IP-Address OK? Method Status Protocol FastEthernet0/0 unassigned YES unset up up Serial1/0 unassigned YES unset administratively down down Serial1/1 unassigned YES unset administratively down down Serial1/2 unassigned YES unset administratively down down Serial1/3 unassigned YES unset administratively down down GigabitEthernet2/0 unassigned YES unset administratively down down GigabitEthernet3/0 unassigned YES unset administratively down down GigabitEthernet4/0 unassigned YES unset administratively down down GigabitEthernet5/0 unassigned YES unset administratively down down GigabitEthernet6/0 unassigned YES unset administratively down down Virtual-Access1 unassigned YES unset up up Virtual-Access2 unassigned YES unset up up Dialer1 10.10.10.2 YES DHCP up up R-Client(config)# R-Client(config)#do ping 10.10.10.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 20/32/48 ms R-Client(config)#