Project

General

Profile

Actions

Feature #12438

closed

Option to select PPPoE Server authentication protocol

Added by Viktor Gurov about 2 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
PPPoE Server
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default

Description

It is not possible to enable chap authentication via the gui. The service config file is generated with pap authentication only.

mpd5 supports PAP/CHAP/CHAP-MD5/MSCHAPv1/MSCHAPv2 protocols:
http://mpd.sourceforge.net/doc5/mpd20.html#20

pap
PAP style authentication. Note that this style of authentication is insecure, since the password crosses the link in plaintext.

Default disable and accept.

chap
CHAP style authentication. This style of authentication is safer than PAP, because only a hash of the password is passed over the link. Mpd supports MD5 style CHAP and Microsoft style CHAP versions 1 and 2. Mpd will prefer Microsoft CHAP over MD5 CHAP to get encryption keys.

This option is an alias for chap-md5 chap-msv1 chap-msv2

chap-md5
Traditional CHAP MD5 style authentication.

Default disable and accept.

chap-msv1
Microsoft CHAP style authentication.

Default disable and deny.

chap-msv2
Microsoft CHAP style authentication Version 2.

Default disable and accept.

+ EAP

Actions #2

Updated by Jim Pingle about 1 month ago

  • Status changed from New to Pull Request Review
  • Assignee set to Viktor Gurov
  • Target version set to 2.6.0
  • Plus Target Version set to 22.01
Actions #3

Updated by Viktor Gurov about 1 month ago

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100
Actions #4

Updated by Jim Pingle about 1 month ago

  • Subject changed from Allow to select authentication protocol to Option to select PPPoE Server authentication protocol

Updating subject for release notes.

Actions #5

Updated by Max Leighton about 1 month ago

  • Status changed from Feedback to Resolved

Tested CHAP with PPPoE server in

2.6.0-DEVELOPMENT (amd64)
built on Sat Oct 30 05:23:33 UTC 2021
FreeBSD 12.3-PRERELEASE

It works. Marking the ticket resolved.

Actions

Also available in: Atom PDF