PPP协议实验

• 实验拓展图

• 实验思路

1.R1与R2配置相连接口，直接建立单向验证，R1为主验证方，R2为被验证方

2.R2与R3建立MP口，把R2与R3相连接的链条捆绑，然后对捆绑接口配置地址

3.R2与R3进行双向验证，都是主验证方和被验证方，配置过程与单向一样，注意：验证是在物理接口验证。

• Ip配置

R1

[R1]int Serial 3/0/0

[R1-Serial3/0/0]ip ad 192.168.1.1 24

R2,两个端口号捆绑

[R2-Serial3/0/0]ip ad 192.168.1.2 24

[R2-Serial3/0/0]q

[R2]int Mp-group 0/0/0

[R2-Mp-group0/0/0]q

[R2]int Serial 3/0/1

[R2-Serial3/0/1]ppp mp mp

[R2-Serial3/0/1]ppp mp Mp-group 0/0/0

Mar 24 2024 19:00:56-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol PPP

 on the interface Serial3/0/1 has entered the DOWN state.

[R2-Serial3/0/1]q

[R2]int Serial 4/0/0

[R2-Serial4/0/0]ppp mp mp

[R2-Serial4/0/0]ppp mp Mp-group 0/0/0

Mar 24 2024 19:01:32-08:00 R2 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol PPP

 on the interface Serial4/0/0 has entered the DOWN state.

[R2-Serial4/0/0]

[R2-Serial4/0/0]q

[R2]int Mp-group 0/0/0

[R2-Mp-group0/0/0]ip ad 192.168.2.2 24

[R2-Mp-group0/0/0]

Mar 24 2024 19:04:19-08:00 R2 %%01IFNET/4/LINK_STATE(l)[10]:The line protocol PP

P IPCP on the interface Mp-group0/0/0 has entered the UP state.

[R2-Mp-group0/0/0]

R3，两个端口号捆绑

[R3]int Mp-group 0/0/0

[R3-Mp-group0/0/0]

Mar 24 2024 19:00:56-08:00 R3 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PPP

 on the interface Serial3/0/0 has entered the DOWN state.

[R3-Mp-group0/0/0]q

[R3]int s

[R3]int Serial 3/0/0

[R3-Serial3/0/0]ppp mp mp

[R3-Serial3/0/0]ppp mp Mp-group 0/0/0

Mar 24 2024 19:02:21-08:00 R3 %%01IFNET/4/LINK_STATE(l)[4]:The line protocol PPP

 on the interface Serial3/0/0 has entered the DOWN state.

[R3-Serial3/0/0]

[R3-Serial3/0/0]q

[R3]int s

[R3]int Serial 3/0/1

[R3-Serial3/0/1]ppp mp mp

[R3-Serial3/0/1]ppp mp Mp-group 0/0/0

[R3-Serial3/0/1]

Mar 24 2024 19:03:11-08:00 R3 %%01IFNET/4/LINK_STATE(l)[7]:The line protocol PPP

 on the interface Serial3/0/1 has entered the DOWN state.

[R3-Serial3/0/1]q

[R3]int Mp-group 0/0/0

[R3-Mp-group0/0/0]ip ad 192.168.2.3 24

[R3-Mp-group0/0/0]

Mar 24 2024 19:04:19-08:00 R3 %%01IFNET/4/LINK_STATE(l)[9]:The line protocol PPP

 IPCP on the interface Mp-group0/0/0 has entered the UP state.

• PPP协议配

1.R2对R1的PPP进行单向chap验证

R2

[R2-aaa]

[R2-aaa]local-user wangdaye password cipher wdy12345

Info: Add a new user.

[R2]int Serial 3/0/0

[R2-Serial3/0/0]ppp authentication-mode chap

R1

[R1-Serial3/0/0]ppp chap user wdy12345

[R1-Serial3/0/0]

[R1-Serial3/0/0]ping 192.168.1.2

  PING 192.168.1.2: 56  data bytes, press CTRL_C to break

    Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=255 time=70 ms

    Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=255 time=20 ms

    Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=255 time=20 ms

    Reply from 192.168.1.2: bytes=56 Sequence=4 ttl=255 time=20 ms

Reply from 192.168.1.2: bytes=56 Sequence=5 ttl=255 time=20 ms

  --- 192.168.1.2 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

round-trip min/avg/max = 20/30/70 ms



[R1-Serial3/0/0]undo ppp chap user wdy12345

[R1-Serial3/0/0]ppp chap password cipher 12345

还是可以ping通

2.R2和R3的ppp进行双向chap验证

[R2-aaa]local-user zhangdaye password cipher wdy12345

Info: Add a new user.

[R2-aaa]

[R2-aaa]

[R2-aaa]local-user zhangdaye service-type ppp

[R2-aaa]

[R2]int Serial 3/0/1

[R2-Serial3/0/1]ppp authentication-mode chap

[R2-Serial3/0/1]q

[R2]int Serial 4/0/0

[R2-Serial4/0/0]ppp authentication-mode chap

[R3-Serial3/0/0]ppp chap user zhangdaye

[R3-Serial3/0/0]ppp chap password cipher zdy12345



[R3-aaa]local-user zhangdama service-type ppp

[R3-aaa]

[R3-aaa]q

[R3]int Serial 3/0/0

[R3-Serial3/0/0]ppp authentication-mode chap

[R3-Serial3/0/0]

[R3-Serial3/0/0]q

[R3]int Serial 3/0/1

[R3-Serial3/0/1]ppp authentication-mode chap

[R2-Serial4/0/0]ppp chap user zhangdama

[R2-Serial4/0/0]ppp chap password cipher zdm12345

[R2-Serial4/0/0]q

[R2]ping 192.168.2.3

  PING 192.168.2.3: 56  data bytes, press CTRL_C to break

    Reply from 192.168.2.3: bytes=56 Sequence=1 ttl=255 time=40 ms

    Reply from 192.168.2.3: bytes=56 Sequence=2 ttl=255 time=30 ms

    Reply from 192.168.2.3: bytes=56 Sequence=3 ttl=255 time=20 ms

    Reply from 192.168.2.3: bytes=56 Sequence=4 ttl=255 time=20 ms

    Reply from 192.168.2.3: bytes=56 Sequence=5 ttl=255 time=1 ms



  --- 192.168.2.3 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 1/22/40 ms