PPP配置

PPP(Point-to-Poin Protocol,点对点协议)是一种点对点的链路层协议。能提供用户认证，易于扩充，并支持同/异步通信。

PPP协议基本配置

1. 组网图

   

2. 配置步骤

   配置RTA接口IP和协议

   //配置接口IP地址
   <H3C>sys
   [H3C-Serial1/0]interface Serial 1/0
   [H3C-Serial1/0]ip address 10.1.1.1 30
   //配置接口协议为ppp
   [H3C-Serial1/0]link-protocol ppp
   

   RTB配置步骤与PTA相同，只需要把IP配置为10.1.1.2即可

PAP认证配置

1. 组网图

   

2. 配置步骤

   • 配置RTA、RTB的Serial1/0接口ip

     //RTA配置
     <H3C>sys
     [H3C]interface Serial 1/0
     [H3C-Serial1/0]ip address 10.1.1.1 30
     [H3C-Serial1/0]quit

     RTB以相同步骤配置IP为10.1.1.2/30

   • 在RTA上配置以PAP方式验证对端RTB

     //配置对端RTB的用户名和密码
     [H3C]local-user rtb class network
     [H3C-luser-network-rtb]password simple pwdpwd
     [H3C-luser-network-rtb]service-type ppp
     [H3C-luser-network-rtb]quit
     //在接口视图下设置本地验证对端RTB的方式为PAP
     [H3C]interface Serial 1/0
     [H3C-Serial1/0]ppp authentication-mode chap
     //重启Serial1/0接口
     [H3C-Serial1/0]shutdown
     [H3C-Serial1/0]un shutdown

     此时在RTA上pingRTB不能ping通

   • 配置RTB为被验证方

     [H3C-Serial1/0]ppp pap local-user rtb password simple pwdpwd

     验证

     [H3C-Serial1/0]ping 10.1.1.1
     Ping 10.1.1.1 (10.1.1.1): 56 data bytes, press CTRL_C to break
     56 bytes from 10.1.1.1: icmp_seq=0 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=1 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=2 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=3 ttl=255 time=2.000 ms
     56 bytes from 10.1.1.1: icmp_seq=4 ttl=255 time=2.000 ms
     

CHAP认证配置

1. 组网图

   

2. 配置步骤

   • 配置RTA、RTB 的IP分别为10.1.1.1/30、10.1.1.2/30

   • 在RTA上配置以CHAP方式验证对端RTB

     [H3C]local-user rtb class network
     [H3C-luser-network-rtb]password simple pwdpwd
     [H3C-luser-network-rtb]service-type ppp
     [H3C-luser-network-rtb]quit
     [H3C]interface Serial 1/0
     [H3C-Serial1/0]ppp authentication-mode chap
     [H3C-Serial1/0]shutdown
     [H3C-Serial1/0]un shutdown

   • 配置RTB为被验证方

     [H3C-Serial1/0]ppp chap user rtb
     [H3C-Serial1/0]ppp chap password simple pwdpwd

     验证

     [H3C-Serial1/0]ping 10.1.1.1
     Ping 10.1.1.1 (10.1.1.1): 56 data bytes, press CTRL_C to break
     56 bytes from 10.1.1.1: icmp_seq=0 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=1 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=2 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=3 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=4 ttl=255 time=2.000 ms
     

MP认证配置

1. 组网图

   

2. 配置步骤

   • 创建MP-group接口

     <H3C>sys
     [H3C]interface MP-group 1
     [H3C-MP-group1]ip address 10.1.1.1 30
     [H3C-MP-group1]quit

   • 把相应物理接口加入MP-group

     [H3C]interface Serial 1/0
     [H3C-Serial1/0]link-protocol ppp
     [H3C-Serial1/0]ppp mp MP-group 1
     [H3C-Serial1/0]quit
     [H3C]interface Serial 2/0
     [H3C-Serial2/0]link-protocol ppp
     [H3C-Serial2/0]ppp mp MP-group 1
     [H3C-Serial2/0]quit

   • 验证

     [H3C]ping 10.1.1.1
     Ping 10.1.1.1 (10.1.1.1): 56 data bytes, press CTRL_C to break
     56 bytes from 10.1.1.1: icmp_seq=0 ttl=255 time=0.000 ms
     56 bytes from 10.1.1.1: icmp_seq=1 ttl=255 time=2.000 ms
     56 bytes from 10.1.1.1: icmp_seq=2 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=3 ttl=255 time=1.000 ms
     56 bytes from 10.1.1.1: icmp_seq=4 ttl=255 time=1.000 ms