nanog mailing list archives

Re: Security problem in PPPoE connection


From: "Steven M. Bellovin" <smb () cs columbia edu>
Date: Sun, 12 Mar 2006 14:50:45 -0500


On Sun, 12 Mar 2006 20:32:26 +0100
Florian Weimer <fw () deneb enyo de> wrote:


* Joe Shen:

What's your method to deal with such problem? Will
CHAP in PPPoE help?

AFAIK, CHAP does not authenticate the terminal server, either, so it
won't stop all attacks.

CHAP can be bidirectional.

                --Steven M. Bellovin, http://www.cs.columbia.edu/~smb


Current thread: