PPP Authentication – EAP

One way authentication

EAP Server (Authenticator)

1
! Set encapsulation to PPP
2
R(config-if)# encapsulation ppp
3
! Enable PPP authentication
4
R(config-if)# ppp authentication eap
Copied!
PPP will require the use of a Radius. However, you can use the local usernames if you configure:
1
R(config-if)# ppp eap local
2
! Use local username and passwords to perform authenticaion
Copied!
Remember to configure the username and password that the client will use:
1
R(config)# username USER password PASS
Copied!

EAP Client (Authenticating)

1
R(config-if)# encapsulation ppp
2
! Set the password used for EAP
3
R(config-if)# ppp eap password PASS
4
! By default, the hostname is used as the username. You can change it with:
5
R(config-if)# ppp eap identity USER
Copied!

Two way authentication

On R1:
1
R1(config)# username USER2 password PASS2
2
R1(config)# interface INTERFACE
3
R1(config-if)# encapsulation ppp
4
R1(config-if)# ppp authentication eap
5
R1(config-if)# ppp eap local
6
R1(config-if)# ppp eap password PASS1
7
R1(config-if)# ppp eap identity USER1
Copied!
On R2:
1
R1(config)# username USER1 password PASS1
2
R2(config)# interface INTERFACE
3
R2(config-if)# encapsulation ppp
4
R2(config-if)# ppp authentication eap
5
R2(config-if)# ppp eap local
6
R2(config-if)# ppp eap password PASS2
7
R2(config-if)# ppp eap identity USER2
Copied!