PPP Security Parameters

The following truth table outlines the various combinations of the Annex PPP security parameters, and their resultant effect. This table lists all combinations of host-based PPP security. PPP security parameters not listed for any combination are not required to achieve the desired effect.

If enable_security = N

• No CLI or PPP authentication is attempted.

If slip_ppp_security = N

• No host-based PPP authentication is attempted. Use local PPP security via port_password.

If connecting interactively via CLI then

• If cli_security = N and ppp_security_protocol = none
  • User is not prompted for userame/password for CLI.
  • User is prompted for username/password when typing ppp.
  • PPP client is not challenged for PAP or CHAP.

If cli_security = N and ppp_security_protocol = PAP or CHAP-PAP and ppp_sec_auto = N

• User is not prompted for username/password for CLI.
• User is not prompted for username/password when typing ppp.
• PPP client is challenged for PAP, CHAP, or CHAP then PAP.

If cli_security = N and ppp_security_protocol = PAP or CHAP-PAP and ppp_sec_auto = Y

• User is not prompted for username/password for CLI.
• User is prompted for username/password when typing ppp.
• PPP client is not challenged for PAP or CHAP.

If cli_security = Y and ppp_security_protocol = none

• User is prompted for userame/password for CLI.
• User is not prompted for username/password when typing ppp.

If cli_security = Y and ppp_security_protocol = PAP or CHAP or CHAP-PAP and ppp_sec_auto = N

• User is prompted for username/password for CLI.
• User is not prompted for username/password when typing ppp.
• PPP client is challenged for PAP, CHAP, or CHAP then PAP.

If cli_security = Y and ppp_security_protocol = PAP or CHAP or CHAP-PAP and ppp_sec_auto = Y

• User is prompted for username/password for CLI.
• User is not prompted for username/password when typing ppp.
• PPP client is not challenged for PAP or CHAP.

If connecting via auto-detected PPP then

If ppp_security_protocol = none

• PPP client is not challenged for PAP or CHAP. UNSECURE!

If ppp_security_protocol = PAP or CHAP or CHAP-PAP

• PPP client is challeneged for PAP, CHAP, or CHAP then PAP.