Thanks for the doc but I think I'm missing something... I am on a 880 so this is what I have so far.

I guess my question is where do I input the username and password for the PADI callin. does this make sense or am I way off.

Hello Brent,

as for PPP authentication you can:

a) use a username password command in global config mode

OR

b) inside the dialer interface use the ppp chap username e ppp chap password or ppp chap sent-password (not sure about the command syntax but the idea is this)

you can debug the PPP process setup with

terminal monitor

debug ppp negotiation

debug ppp authentication

Hope to help

Giuseppe

yes see that's what I thought and this is what's confusing me...

when I go under the dialer1 interface all I see is this

BLKLANSTR01(config-if)#ppp chap ?

hostname Set alternate CHAP hostname

password Set default CHAP password

refuse Refuse to authenticate using CHAP

wait Wait for caller to authenticate first

and when i go further like under hostname and so on I don't see anything that implies a "username and password" to be used for pppoe authentication. So I'm thinking I must be in the wrong place. Very strange this 880 is.

I think I have it I would like some confirmation

the dialer interface below is set to callin and use the username:bleh@businessisp.ca and the password:blaahaa

correct? Or do I have what "hostname" means wrong?

interface Dialer1

description outside

ip address pp.pp.pp.pp 255.255.255.0

ip access-group ACL-INBOUND in

ip nat outside

ip inspect ipins out

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

ppp authentication chap callin

ppp chap hostname bleh@businessisp.ca

ppp chap password 0 blaahaa

end

Hello Brent,

actually with ppp hostname you specify how your router presents itself to the PPP peer.

ppp chap hostname

To create a pool of dialup routers that all appear to be the same host when authenticating with Challenge Handshake Authentication Protocol (CHAP), use the ppp chap hostname command in interface configuration mode. To disable this function, use the no form of this command.

ppp chap hostname hostname

no ppp chap hostname hostname

Syntax Description

hostname

The name sent in the CHAP challenge.

So the commands look like correct and you need to use the parameters that your ISP has given you.

hostname: because the PPP authentication appears between two routers the default name is the router hostname.

And the username password command in global config is used to define the other router's hostname and password is the same (but this is bidirectional authentication that happens on both side)

So actually this is the correct way to configure CHAP on an ISP connection where the caller (your router is authenticated) ppp authentication chap callin

Hope to help

Giuseppe