Actiontec MI424WR User Guide - Page 71

Password Authentication Protocol, Challenge Handshake, Microsoft CHAP versions 1 and 2

Page 71 highlights

Actiontec Wireless Broadband Router User Manual PPP Authentication Point-to-Point Protocol (PPP) currently supports four authentication protocols: Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), and Microsoft CHAP versions 1 and 2. Select the authentication protocols the Router may use when negotiating with a PPTP server in this section. Select all the protocols if no information is available about the server's authentication methods. Note that encryption is performed only if Microsoft CHAP, Microsoft CHAP version 2, or both are selected. MWarning: The PPP Authentication settings should not be changed unless instructed to do so by Verizon. Login User Name Enter the user name (provided by the ISP) in this text box. Login Password Enter the password (provided by the ISP) in this text box. Support Unencrypted Password (PAP) Password Authentication Protocol (PAP) is a simple, plain-text authentication scheme. The user name and password are requested by the networking peer in plain-text. PAP, however, is not a secure authentication protocol. Man-in-the-middle attacks can easily determine the remote access client's password. PAP offers no protection against replay attacks, remote client impersonation, or remote server impersonation. Support Challenge Handshake Authentication (CHAP) Click in this check box to activate CHAP, a challenge-response authentication protocol that uses MD5 to hash the response to a challenge. CHAP protects against replay attacks by using an arbitrary challenge string per authentication attempt. Support Microsoft CHAP Click in this check box if communicating with a peer that uses Microsoft CHAP authentication protocol. Support Microsoft CHAP Version 2 Select this check box if communicating with a peer that uses Microsoft CHAP Version 2 authentication protocol. PPP Compression The PPP Compression Control Protocol (CCP) is responsible for configuring, enabling, and disabling data compression algorithms on both ends of the pointto-point link. It is also used to signal a failure of the compression/ decompression mechanism in a reliable manner. 68

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171

68
Actiontec Wireless Broadband Router User Manual
PPP Authentication
Point-to-Point Protocol (
PPP
) currently supports four authentication pro-
tocols:
Password Authentication Protocol
(
PAP
),
Challenge Handshake
Authentication Protocol
(
CHAP
), and
Microsoft CHAP versions 1 and 2
.
Select the authentication protocols the Router may use when negotiating with a
PPTP
server in this section. Select all the protocols if no information is available
about the server’s authentication methods. Note that encryption is performed
only if Microsoft
CHAP
, Microsoft
CHAP
version 2, or both are selected.
M
Warning:
The
PPP
Authentication settings should not be
changed unless instructed to do so by Verizon.
Login User Name
Enter the user name (provided by the
ISP
) in this text box.
Login Password
Enter the password (provided by the
ISP
) in this text box.
Support Unencrypted Password (PAP)
Password Authentication Protocol (
PAP
)
is a simple, plain-text authentication scheme. The user name and password are
requested by the networking peer in plain-text.
PAP
, however, is not a secure
authentication protocol. Man-in-the-middle attacks can easily determine the
remote access client’s password.
PAP
offers no protection against replay attacks,
remote client impersonation, or remote server impersonation.
Support Challenge Handshake Authentication (CHAP)
Click in this check box to
activate
CHAP
, a challenge-response authentication protocol that uses
MD5
to
hash the response to a challenge.
CHAP
protects against replay attacks by using
an arbitrary challenge string per authentication attempt.
Support Microsoft CHAP
Click in this check box if communicating with a peer
that uses Microsoft
CHAP
authentication protocol.
Support Microsoft CHAP Version 2
Select this check box if communicating with a
peer that uses Microsoft
CHAP
Version 2 authentication protocol.
PPP Compression
The
PPP
Compression Control Protocol (
CCP
) is responsible for configuring,
enabling, and disabling data compression algorithms on both ends of the point-
to-point link. It is also used to signal a failure of the compression/ decompres-
sion mechanism in a reliable manner.