%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up Network admins configure CHAP on routers because it provides protection against replay attacks by the peer through the use of an incrementally changing identifier and of a variable challenge-value.Īuthentication through CHAP is more secure because it requires that both the client and server know the plaintext of the secret, although it is never sent over the network.ĬHAP provides better security as compared to Password Authentication Protocol (PAP).Įnter configuration commands, one per line.

One of important feautures of CHAP is that it doesn’t only require the client to authenticate itself at startup time, but sends challenges at regular intervals to make sure the client hasn’t been replaced by an intruder, for instance by just switching phone lines.