authentication on multilink is enough, no need for that on physical interface Serial0/0 no ip address encapsulation ppp serial restart-delay 0 clock rate 128000 ppp multilink ppp multilink group 1 ! interface Multilink1 ip address 192.168.12.1 255.255.255.0 ppp authentication chap ppp chap hostname R1 ppp chap password 0 cisco ppp multilink ppp multilink group 1
R1#show ip inter brie | e unass Interface IP-Address OK? Method Status Protocol Multilink1 192.168.12.1 YES manual up up On Wed, May 23, 2012 at 8:37 PM, Waleed Alsherif <[email protected]>wrote: > Hi Fulvio , > > PPP authentication is one-way authentication , it you configured R7 to > authenticate R8 , R8 has to send its user/password to R7 to bring up the > link . > > In your practice , you mentioned that both ways of adding the > authentication on physical interface or logical ( Multilink ) as the same > that is correct but using the logical link is different that single link . > > Do not forget to add " username USER password PASS " on the authenticator > " the router request authentication " . > > HTH > > Best Regards > Waleed Abdulfattah Alsherif > IP and Data Network Engineer > CCIE RS (Written) / CCNP / CCNA > Mob. 002-01019556246 > > > ________________________________ > From: Fulvio allegretti <[email protected]> > To: [email protected] > Sent: Thursday, May 24, 2012 12:39 AM > Subject: [OSL | CCIE_RS] PPP Multilink authentication > > > Hi all, > > On many solution guides I see the authentication configured on the > physical as well as the multilink interfaces, but it looks to me as even if > you put it is irrelevant if you put on the physical or not. Can you confirm? > > Here is my lab at the moment: > ****************************R8 > ! > interface Multilink1 > ip address 215.8.7.8 255.255.255.224 > no peer neighbor-route > ppp authentication chap > ppp chap hostname Router8 > ppp chap password 0 ipexpert > ppp multilink > ppp multilink group 1 > end > R8#sh run int se 0/0 > Building configuration... > Current configuration : 181 bytes > ! > interface Serial0/0 > no ip address > encapsulation ppp > ppp authentication chap > ppp chap hostname Router8 > ppp chap password 0 ipexpert > ppp multilink > ppp multilink group 1 > end > > > ***********************R7 > > ! > interface Multilink1 > ip address 215.8.7.7 255.255.255.224 > no peer neighbor-route > ppp authentication chap > ppp chap hostname Router7 > ppp chap password 0 ipxpert > ppp multilink > ppp multilink group 1 > end > R7(config-if)#do sh run int se 0/2/0 > Building configuration... > Current configuration : 121 bytes > ! > interface Serial0/2/0 > no ip address > encapsulation ppp > clock rate 2000000 > ppp multilink > ppp multilink group 1 > end > > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 215.8.7.8, timeout is 2 seconds: > !!!!! > Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms > > R7(config-if)#do ping 215.8.7.8 > > R7#sh ppp multilink active > Multilink1 > Bundle name: Router8 > Remote Username: Router8 > Remote Endpoint Discriminator: [1] Router8 > Local Username: Router7 > Local Endpoint Discriminator: [1] Router7 > Bundle up for 00:06:33, total bandwidth 1544, load 1/255 > Receive buffer limit 12000 bytes, frag timeout 1000 ms > 0/0 fragments/bytes in reassembly list > 0 lost fragments, 0 reordered > 0/0 discarded fragments/bytes, 0 lost received > 0x0 received sequence, 0x0 sent sequence > Member links: 1 active, 0 inactive (max not set, min not set) > Se0/2/0, since 00:06:33 > > R7#sh ip int bri > Interface IP-Address OK? Method Status > Protocol > FastEthernet0/0 215.7.7.7 YES manual up > up > FastEthernet0/1 unassigned YES manual up > up > FastEthernet0/1.47 215.4.7.7 YES manual up > up > FastEthernet0/1.67 215.6.7.7 YES manual up > up > FastEthernet0/1.78 215.7.8.7 YES manual up > up > Serial0/2/0 unassigned YES TFTP up > up > ATM0/3/0 unassigned YES unset administratively > down down > Multilink1 215.8.7.7 YES manual up > up > Loopback0 215.0.0.7 YES manual up > up > R7# > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com <http://www.platinumplacement.com/> > > http://onlinestudylist.com/mailman/listinfo/ccie_rs > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com <http://www.platinumplacement.com/> > > http://onlinestudylist.com/mailman/listinfo/ccie_rs > _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
