Authenticating a dial up router through a certificate

[elavezzoli]

Is there a way to authenticate an ISDN connecting router using a certificate?

I would like that the router be authenticated (like chap authentication) during PPP negotiaton, but I don't want to use a VPN (or IPSEC).

[paqiu]

Hi,

I do not think you can do that.

Because certificate belongs to KEY exchange mechanism which is one part of the IPSEC VPN.

I do not think PPP negotiation support certificate, only PAP, CHAP and MSCHAP.

Best Regards,

[cjacinto]

Yes using EAP with Radius, see:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122limit/122x/122xb/122xb_2/fteaprad.htm