1、实验拓扑:
2、实验要求:
1、R1和R2使用PPP链路直连,R2和R3把2条PPP链路捆绑为PPP MP直连
2、按照图示配置IP地址
3、R2对R1的PPP进行单向chap验证
4、R2和R3的PPP进行双向chap验证
3、实验思路:
1.先将其R1和R2网段的物理接口ip配置好,然后R2对R1的单向chap验证所以R2为主验证方R1为被验证方用PPP协议来验证
R2和R3用ppp协议进行双向chap验证所以R2即可为主验证方也可为被验证方,但我所作让其为主验证方,再将R2和R3多个ppp链路捆绑为一条链路使用,MP可以实现增加带宽、负载分担、链路备份以及降低报文时延的目的
4、实验步骤:
1.先将R1和R2网段的物理接口配ip
R1:int s 3/0/0
R1:ip adress 192.168.1.1 24
R2:int s 3/0/0
R2:ip adress 192.168.1.2 24
2.R2为主验证方R1为被验证方根据题目需要给其配置PPP协议
主验证方配置:
R2:aaa
R2:local-user mj password cipher mj123
R2:local-user mj server-type ppp
R2:int s 3/0/0
R2:ppp authentication-mode chap
被验证方配置:
R1:int s 3/0/0
R1:ppp chap user mj
R1:ppp chap password cipher mj123
R1 ping R2
3.R2也可为主验证方,R3即为被验证方为其配PPP协议题目还需MP直连
R2的MP配置
R2:int mp-mpgroup 0/0/0
R2:int s 3/0/1
R2:ppp mp mp-group 0/0/0
R2:int 4/0/0
R2:ppp mp mp-group 0/0/0
R2:int mp-group 0/0/0
R2:ip address 192.168.2.2 24
R3的MP配置
R3:int mp-mpgroup 0/0/1
R3:int s 3/0/0
R3:ppp mp mp-group 0/0/1
R3:int 3/0/1
R3:ppp mp mp-group 0/0/1
R3:int mp-group 0/0/1
R3:ip address 192.168.2.3 24
4.主验证方和被验证方的ppp协议配置
主验证方
R2:aaa
R2:local-user mj password cipher mj123
R2:local-user mj server-type ppp
R2:int s 3/0/1
R2:ppp authentication-mode chap
R2:int s 4/0/0
R2:ppp authentication-mode chap
被验证方:
R3:int s 3/0/0
R3:ppp chap user mj
R3:ppp chap password cipher mj123
R3:int s 3/0/1
R3:ppp chap user mj
R3:ppp chap password cipher mj123
R2 ping R3
注:若在其验证时修改与之前密码不一样还是能ping的通时因为其第一次已经协商好的
即需将路由器配置在其接口shutdown(关闭)在undo shutdown(重启)即可