Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: (ASCEND) CHAP, PAP presentation order



> This problem also occurs with token cards as the response must not be
> CHAP'd (which will occur by default) as the token servers need the
> original passcode.

To solve the problem of using one-time-password, or challenge-response,
or time-based-key authentication, you need to put pressure on all the
vendors to implement the PPP Extensible Authentication Protocol (EAP)
described in RFC 2284.  The problem is that you need three different
pieces to get it to work - EAP in the dialup client, the NAS, and the
RADIUS server.  Once in place, this will allow token cards to be used
with both async and sync links.

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>