Hello all,
> Just a general question that I've been pondering.
>
> Why is PAP or CHAP required when dialing from one site to multiple sites
> but not required when dialing from one site to one other site?
>
> Shouldn't authentication be required all the time?
>
Yes and no. From security standpoint, auhentication should be required all the time. From technical standpoint, auth. is required only when you have multiple sites because that is one of the possible ways how router "knows" who is on the other side and to which logical interface to tie connection (read Dialer or Virtual-Access).