Руководство Пользователя для Netopia 2e-w

Скачать
Страница из 170
Cayman 2E-W User’s Guide
How Your Cayman 2E-W Works
November 2000
C-9
and accepts the information or until the connection is 
terminated. Passwords are sent in clear text format, which offers 
no protection from interception and playback by unauthorized 
users.
Challenge Handshake Authentication Protocol (CHAP)– The 
Challenge Handshake Authentication Protocol (CHAP) is a more 
secure authentication method than PAP. CHAP authentication 
involves three entities: a “secret” known to both link peers, a 
random challenge value, and a sequential challenge identifier. 
The authenticator sends a numbered message that includes a 
challenge value to the remote peer. The remote peer uses the 
secret to encrypt the challenge value and challenge identifier 
using a one-way hash function, ensuring that the response 
cannot be intercepted and used by an unauthorized user to 
obtain a legal password. The challenge identifier ensures that the 
encrypted authentication information cannot be recorded and 
played back later to gain access by an unauthorized user.
Network Configuration
After a PPP link has been established and authentication has been 
satisfied, PPP sends Network Control Protocol (NCP) packets to 
configure one or more network layer protocols, such as TCP/IP. 
Link Up
Once a network-layer protocol is configured, the PPP link is 
considered up (open), and datagrams for that protocol are 
exchanged over the link. Either peer can close a network-layer 
connection without interfering with other network-layer 
connections or the LCP connection. A PPP peer discards any packets 
received when the corresponding NCP is not open. 
Link Termination
A link can be terminated during initialization because a configuration 
or authentication failure occurs. Once a PPP link is established, it 
remains configured for communication unless explicit LCP or NCP 
packets close the link or until some external event, such as the