Represents the Challenge-Handshake Authentication Protocol. More...
Methods | |
| Description.Get | |
| Returns a textual description of the object. | |
| Parent.Get | |
| Returns the parent object. | |
| Secret.Get | |
| Returns the configured Secret. More... | |
| Secret.Set secret | |
| Configures the Secret on the Challenge Handshake Authentication Protocol ( CHAP ) More... | |
Represents the Challenge-Handshake Authentication Protocol.
PPP defines an extensible Link Control Protocol, which allows negotiation of an Authentication Protocol for authenticating its peer before allowing Network Layer protocols to transmit over the link.
This class provides the Password Authentication protocol as described per RFC1334, section 3
The Challenge-Handshake Authentication Protocol (CHAP) is used to periodically verify the identity of the peer using a 3-way handshake. This is done upon initial link establishment, and MAY be repeated anytime after the link has been established.
After the Link Establishment phase is complete, the authenticator sends a "challenge" message to the peer. The peer responds with a value calculated using a "one-way hash" function. The authenticator checks the response against its own calculation of the expected hash value. If the values match, the authentication is acknowledged; otherwise the connection SHOULD be terminated.
CHAP provides protection against playback attack through the use of an incrementally changing identifier and a variable challenge value. The use of repeated challenges is intended to limit the time of exposure to any single attack. The authenticator is in control of the frequency and timing of the challenges.
This authentication method depends upon a "\@emph{secret}" known only to the authenticator and that peer. The secret is not sent over the link. This method is most likely used where the same secret is easily accessed from both ends of the link.
By default, authentication is not mandatory. If authentication of the link is desired, an implementation MUST specify the Authentication-Protocol Configuration Option during Link Establishment phase.
| Layer2.Ppp.Auth.Chap::Secret.Get |
