If you don't have CHAP configured, it does not offer CHAP in the negotiation. I have confirmed this myself. What happens is the Telecom terminator (mostly seems to happen in the South Island) commences CHAP authentication. This is wrong. It should not do this if it is not offered in the IPCP exchange. So you can either configure CHAP as an additional authentication method, or tell the router to refuse it. -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Anton Smith Sent: Wednesday, 28 April 2010 12:49 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Xtra BBA Issue with Cisco 877 Hi, I've come across this myself recently: I think that you might also find that the issue is that the cisco doesn't have a chap password configured, yet during negotiation it originally states that it can do chap. After which everything falls apart (quite strange behaviour actually - if the chap password is not configured it shouldn't state it can do chap for that connection). Regards, Anton