Point-to-Point Protocol
(PPP)
PPP Overview
Link Control Protocol (LCP)
Network Control Program (NCP)
Configure and verify the
configuration of PPP
PPP authentication
PPP Overview
PPP provides router-to-router and
host-to-network connections over both
synchronous and asynchronous circuits
Transmission Synchronization
Asynchronous Transmission:
• Transmitting & Receiving devices maintain their own
internal clocks. They do not synchronize their clocks.
• Each frame is sent separately.
• Each frame begins with a start bit & ends with a stop bit.
A extra bit called parity bit maybe added for error
detection
Synchronous Transmission:
• Transmitting device provides clocking
• May use separate channel that is dedicated to the clock
• Resists timing errors better than Asynchronous because
the transmitter & receiver use the same clock
• Can transmit large blocks of data
PPP Features
Control of data link setup
Provides for dynamic assignment of IP
addresses
Network protocol multiplexing
Link configuration and link quality testing
Error detection
Negotiation options for capabilities such
as network-layer address negotiation and
data compression negotiations
PPP Layer Function
In order to move data between any two nodes or
routers, a data path must be established, and flow
control procedures must be in place to ensure
delivery of data. This is also true in the WAN
environment and is accomplished by using WAN
protocols such as Point-to-Point Protocol
PPP Components
1. Encapsulating datagrams over serial
links. (Point-to-point links)
2. A Link Control Protocol (LCP) for
establishing, configuring, and
testing the data-link connection.
3. A family of Network Control Protocols
(NCPs) for establishing and
configuring different network-layer
protocols. (TCP/IP, IPX AND
APPLETALK
PPP General Operations
Establishing communications over a
point-to-point link:
1. The originating PPP first sends LCP
frames to configure and (optionally)
test the data-link.
PPP General Operations
2. After the link has been established
and optional facilities have been
negotiated as needed by the LCP, the
originating PPP sends NCP frames to
choose and configure one or more
network-layer protocols. When
each of the chosen network-layer
protocols has been configured,
packets from each network-layer
protocol can be sent over the link
PPP General Operations
3. The link will remain configured for
communications until explicit LCP
or NCP frames close the link, or
until some external event occurs
(for example, an inactivity timer
expires or a user intervenes).
PPP Link Control Protocol
1. First, link establishment and
configuration negotiation occurs. This is
done before any network-layer
datagrams can be exchanged.
2. Second, LCP allows an optional link-
quality determination phase following
the link-establishment and
configuration-negotiation phase. In this
phase, the link is tested to determine
whether the link quality is sufficient to
bring up network-layer protocols.
(This phase is optional)
PPP Link Control Protocol
3. Third, Network-layer protocols can
be configured separately by the
appropriate NCP.
4. Finally, link termination occurs. LCP
can terminate the link at any time. This
usually will be done at the request of a
user but can happen because of a
physical event, such as the loss of
carrier or the expiration of an idle-
period timer.
PPP Layer Function
PPP Authentication
Authentication phase of a PPP session
is optional
After the link has been established, and the authentication
protocol chosen, the peer can be authenticated. If it is used,
authentication takes place before the network-layer
protocol configuration phase begins
Password Authentication Protocol
(PAP)
Challenge Handshake Authentication
Protocol (CHAP)
PPP Authentication
Password Authentication Protocol
(PAP)
PAP is not a strong authentication protocol.
Passwords are sent across the link in clear
text. Also known as 2-way handshake
PPP Authentication
Challenge Handshake Authentication
Protocol (CHAP)
CHAP is used to periodically verify the identity of
the remote node, using a three-way handshake
CHAP provides protection against playback attacks
through the use of a variable challenge value that
is unique and unpredictable
CHAP does not allow a caller to attempt
authentication without a challenge
