Configuring for Cisco Mutual Authentication

- Introduction

This configuration note explains what other settings you need to pay attention to when configuring the Prestige talk to a Cisco router. Due to Cisco's authentication scheme, you need to configure some additional fields in Prestige when talking to a Cisco device. There are two things you must pay attention to. The first is Cisco's mutual authentication scheme, and the second is their interpretation of CHAP.

- Configuration

- If the Cisco router requests PAP, you have to configure more settings in Menu 13 as follows.

`Menu 13 - Default Dial-in Setup` `Telco Options: IP Address Supplied By:` `CLID Authen= None Dial-in User= Yes` `IP Pool= No` `PPP Options: IP Start Addr= N/A` `Recv Authen= CHAP/PAP IP Count(1,4)= N/A` `Compression= Yes` `Mutual Authen= Yes Session Options:` `O/G Username= test Edit Filter Sets= No` `O/G Password= ********` `Multiple Link Options:` `Max Trans Rate(Kbps)= 128` `` `Callback Budget Management:` `Allocated Budget(min)= 0` `Period(hr)= 0` `Press ENTER to Confirm or ESC to Cancel:`

Key Settings:

- Set 'Mutual Authen' to 'Yes'
- Set 'PAP Login' to the appropriate login name
- Set 'PAP Password' to the appropriate login password

- If the Cisco route requests CHAP, you have to configure more settings in Menu 11 as follows.

`Menu 11.1 - Remote Node Profile` `Rem Node Name= LAN2 Edit PPP Options= No` `Active= Yes Rem IP Addr=140.113.1.1` `Call Direction= Both Edit IP= No` `` `Incoming: Telco Option:` `Rem Login= [cisco_hostname] Transfer Type= 64K` `Rem Password= **** Allocated Budget(min)=` `Rem CLID= N/A` `Period(hr)=` `Call Back= N/A Schedules=` `Outgoing: Carrier Access Code=` `My Login= [prestige_systemname]` `Nailed-Up Connection= No` `My Password= ******** Toll Period(sec)= 0` `Authen= CHAP/PAP Session Options:` `Pri Phone #= 10000 Edit Filter Sets= No` `Sec Phone #= Idle Timeout(sec)= 100` `Press ENTER to Confirm or ESC to Cancel:`

Key Settings:

- Set 'Incoming: Rem Login' to the 'Cisco device hostname'
- Set 'Incmoing: Rem Password' to be the same as 'Outgoing: My Password'
- Set 'Outgoing: My Login' to the 'System Name' value in SMT Menu 1

[Note]! The Cisco device must be configured as a remote node but NOT as a remote user in this case

All contents copyright © 1999 ZyXEL Communications Corporation.