Re: (ASCEND) User logins - Scripts Vs PAP

["Joe Max" <max_and_tnt@hotmail.com>]

There is a way around the problem that Phil mentions: if you have two 
numbers for the same hunt group, then you can use DNIS authentication to 
select whether you want PAP or CHAP first. Of course, this comes with a few 
problems of its own, like segregating your users into two bands, making sure 
they use the correct phone number, etc.


>Subject: Re: (ASCEND) User logins - Scripts Vs PAP
>Date: Mon, 13 Dec 1999 15:09:23 -0500 (EST)
>
> > Requirements:
> >   -  Callers using scripted login, or terminal window, can log in
> >      and get authenticated via Radius
> >   -  Callers using windows DUN can authenticate with PAP via Radius
> >   -  Callers using routers with CHAP only support can continue to
> >      log in and authenticate via Radius
> >   -  Other Max4000 and Cisco 1603 calling in can authenticate via
> >      CHAP using local profiles on the max.
> >
> > Can this all be done? How?
>
>Nope. As soon as the Max tells the remote end that it is willing to do
>CHAP, the remote end might select that option, and then you can't go back
>and change to PAP when the Max realizes it's talking to someone to whom
>it should not have offered CHAP. And the fact is, most PPP client software
>will take CHAP if it is offered to them.
>
>-Phil

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>