Mailing List Archive: ppp max-bad-auth

ppp max-bad-auth

Mar 1, 2004, 7:41 AM

Post #1 of 4 (784 views)

Where does it depend on?
Is it something that depends on the operating system? The ppp implementation? RFC 1661?

After doing some quick tests, i found out that Win98 supported it, but W2k & WinXP did not.

--
***************************************
Chatzithomaoglou Anastasios
Network Design & Development Department
FORTHnet S.A.
<achatz@forthnet.gr>
***************************************

RE: ppp max-bad-auth [ In reply to ]

oboehmer at cisco

Mar 1, 2004, 8:26 AM

Post #2 of 4 (725 views)

Permalink

> Where does it depend on?
> Is it something that depends on the operating system? The ppp
> implementation? RFC 1661?
> After doing some quick tests, i found out that Win98 supported it,
> but W2k & WinXP did not.

It depends on the OS and its implementation of RFC2433. I think it
requires ms-chap being negotiated with the access-server/lns when using
MS protocol stack, otherwise the client ignores it (not 100% sure).

oli

Re: ppp max-bad-auth [ In reply to ]

dpeng at cisco

Mar 1, 2004, 11:13 AM

Post #3 of 4 (718 views)

Permalink

Oliver Boehmer (oboehmer) [oboehmer@cisco.com] wrote:
> > Where does it depend on?
> > Is it something that depends on the operating system? The ppp
> > implementation? RFC 1661?
> > After doing some quick tests, i found out that Win98 supported it,
> > but W2k & WinXP did not.
>
> It depends on the OS and its implementation of RFC2433. I think it
> requires ms-chap being negotiated with the access-server/lns when using
> MS protocol stack, otherwise the client ignores it (not 100% sure).

In Win98 and ealier, the Microsoft PPP client would re-prompt the user
for PAP (possibly CHAP as well) username/password if an authentication
failure was received. This "feature" was removed in Win2k and later.

Dennis

> oli
>
> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas

Re: ppp max-bad-auth [ In reply to ]

achatz at forthnet

Mar 22, 2004, 10:17 AM

Post #4 of 4 (730 views)

Permalink

Dennis Peng wrote:

> Oliver Boehmer (oboehmer) [oboehmer@cisco.com] wrote:
>
>>>Where does it depend on?
>>>Is it something that depends on the operating system? The ppp
>>>implementation? RFC 1661?
>>>After doing some quick tests, i found out that Win98 supported it,
>>>but W2k & WinXP did not.
>>
>>It depends on the OS and its implementation of RFC2433. I think it
>>requires ms-chap being negotiated with the access-server/lns when using
>>MS protocol stack, otherwise the client ignores it (not 100% sure).
>

After enabling ms-chap on Win2K/WinXP machines (ms-chap was also configured on router's
side), it worked fine ;-)

>
> In Win98 and ealier, the Microsoft PPP client would re-prompt the user
> for PAP (possibly CHAP as well) username/password if an authentication
> failure was received. This "feature" was removed in Win2k and later.
>
> Dennis
>
>
>> oli
>>
>>_______________________________________________
>>cisco-nas mailing list
>>cisco-nas@puck.nether.net
>>https://puck.nether.net/mailman/listinfo/cisco-nas
>
>

--
***************************************
Chatzithomaoglou Anastasios
Network Design & Development Department
FORTHnet S.A.
<achatz@forthnet.gr>
***************************************