Title: WAN Protocols
1WAN Protocols
- PPP (Point to Point protocol)
2WAN Encapsulation Protocols
- On WAN connection, the protocol depends on the
WAN technology and communicating equipment - Examples
- HDLC
- The default encapsulation type on point-to-point
connections, - Cisco devices ONLY.
- PPP - Provides router-to-router and
host-to-network connections. - Frame Relay - Frame Relay eliminates some of the
time-consuming processes - ATM - The cell relay in which devices send
multiple service types (voice, video, or data) in
fixed-length (53-byte) cells.
With SLIP, you have to know the IP address
assigned to you by your service provider. You
also need to know the IP address of the remote
system you will be dialing into. You may also
need to configure such details as MTU (maximum
transmission unit), MRU (maximum receive unit),
etc.
3What is PPP?
- When you need to connect to a non-Cisco router,
you should use PPP encapsulation. - PPP includes many features
- The link quality management
- If too many errors are detected, PPP takes the
link down. - PPP supports authentication.
4PPP Configuration Options
- PPP may include the following options
- Authentication - Peer exchange authentication
messages. - Password Authentication Protocol (PAP) and
- Challenge Handshake Authentication Protocol
(CHAP). - Compression
- Increases the effective throughput on PPP
connections by reducing the amount of data in the
frame that must travel across the link. - Two compression are Stacker and Predictor.
- Error detection - Identifies fault conditions.
- The Quality and Magic Number options help ensure
a reliable, loop-free data link. - Multilink - Cisco IOS Release 11.1 and later
supports multilink PPP. - This alternative provides load balancing over the
router interfaces that PPP uses. - PPP Callback -
- The client makes the initial call, requests that
the server call it back, and terminates its
initial call.
5PPP Configuration Options
- PPP can be configured to support
- Authentication using either PAP or CHAP
- Compression using either Stacker or Predictor
- Multilink which combines two or more channels to
increase the WAN bandwidth
6PPP Configuration Commands
- Example 1 Enabling PPP on an Interface
- To set PPP as the encapsulation method used by a
serial interface, use the encapsulation ppp
interface configuration command. - R3configure terminal
- R3(config)interface serial 0/0
- R3(config-if)encapsulation ppp
- You must first configure the router with an IP
routing protocol to use PPP encapsulation. - Example 2 Compression
- You can configure point-to-point compression on
serial interfaces after you have enabled PPP.
Because this option invokes a software
compression process, it can affect system
performance. If the traffic already consists of
compressed files (.zip, .tar, or .mpeg, for
example), do not use this option. - R3(config)interface serial 0/0
- R3(config-if)encapsulation ppp
- R3(config-if)compress predictor stac
Why?
7PPP Configuration Commands
- Example 3 Link Quality Monitoring
- LCP provides an optional link quality
determination phase. - If the link quality percentage is not maintained,
the link is deemed to be of poor quality and is
taken down. - This example configuration monitors the data
dropped on the link and avoids frame looping - R3(config)interface serial 0/0
- R3(config-if)encapsulation ppp
- R3(config-if)ppp quality 80
- Example 4 Load Balancing Across Links
- Multilink PPP provides a method for spreading
traffic across multiple physical WAN links while
providing packet fragmentation and reassembly,
proper sequencing, multivendor interoperability,
and load balancing on inbound and outbound
traffic. - Router(config)interface serial 0/0
- Router(config-if)encapsulation ppp
- Router(config-if)ppp multilink
8Verified a Serial PPP Encapsulation Configuration
- Use the show interfaces serial command to verify
proper configuration of HDLC or PPP
encapsulation. - When you configure HDLC, the output of the show
interfaces serial command should show
"encapsulation HDLC". - When you configure PPP, you can check its LCP and
NCP states.
9PPP Authentication Protocols
- PPP defines an extensible LCP that allows
negotiation of an authentication protocol for
authenticating its peer before allowing network
layer protocols to transmit over the link. - PAP is a very basic two-way process.
- There is no encryption-the username and password
are sent in plain text. If it is accepted, the
connection is allowed. - CHAP is more secure than PAP. It involves a
three-way exchange of a shared secret.
10Challenge Handshake Authentication Protocol (CHAP)
- Once authentication is established with PAP, it
essentially stops working. This leaves the
network vulnerable to attack. - CHAP conducts periodic challenges to make sure
that the remote node still has a valid password
value. - The password value is variable and changes
unpredictably while the link exists. - After the PPP link establishment phase is
complete, - The router sends a challenge to the remote node.
- The remote node responds with a value calculated
using a one-way hash function using MD5. - The local router checks the response against its
own calculation of the expected hash value. If
the values match, the initiating node
acknowledges the authentication. Otherwise, it
immediately terminates the connection. - Because the challenge is unique and random, the
resulting hash value is also unique and random.
11Configuring PPP with Authentication
- The procedure outlined in the table describes how
to configure PPP encapsulation and PAP/CHAP
authentication protocols.