Explain about PAP and CHAP?
PAP stands for the Password Authentication Protocol. With this protocol, the “client” (the machine that needs to authenticate itself) sends its name and a password, in clear text, to the “server”. The server returns a message indicating whether the name and password are valid. CHAP stands for the Challenge Handshake Authentication Protocol. It is designed to address some of the deficiencies and vulnerabilities of PAP. Like PAP, it is based on the client and server having a shared secret, but the secret is never passed in clear text over the link. Instead, the server sends a “challenge” – an arbitrary string of bytes, and the client must prove it knows the shared secret by generating a hash value from the challenge combined with the shared secret, and sending the hash value back to the server. The server also generates the hash value and compares it with the value received from the client. At a practical level, CHAP can be slightly easier to configure than PAP because the server sends i