【无标题】zuoye111

1、在R2和R3上创建mp-group口

[R2]int Mp-group 0/0/0

[R3]int Mp-group 0/0/0

2、把R2、R3上的接口加入到上一步创建的mp-group口

[R2]int Serial 3/0/1

[R2-Serial3/0/1]ppp mp Mp-group 0/0/0

[R2]int Serial 4/0/0

[R2-Serial4/0/0]ppp mp Mp-group 0/0/0

[R3]int Serial 3/0/0

[R3-Serial3/0/0]ppp mp Mp-group 0/0/0

[R3]int Serial 3/0/1

[R3-Serial3/0/1]ppp mp Mp-group 0/0/0

3、按照图示配置IP地址

步骤1：R1和R2的直连链路

[R1]int Serial 3/0/0

[R1-Serial3/0/0]ip add 192.168.1.1 24

[R2]int Serial 3/0/0

[R2-Serial3/0/0]ip add 192.168.1.2 24

步骤 2：在R2和R3的mp-group口上配置IP地址

[R2]int Mp-group 0/0/0

[R2-Mp-group0/0/0]ip add 192.168.2.2 24

[R3]int mp-group 0/0/0

[R3-Mp-group0/0/0]ip add 192.168.2.3 24

4、R2对R1的PPP进行单向chap验证

步骤1：在R2上创建用于验证R1的用户，并在接口配置chap验证方式

[R2]aaa

[R2-aaa]local-user zhuyy password cipher 123456ddd

[R2-aaa]local-user zhuyy service-type ppp

[R2]int Serial 3/0/0

[R2-Serial3/0/0]ppp authentication-mode chap

步骤2：在R1连接R2的接口上配置用于验证的用户名和密码

[R1]interface Serial 3/0/0

[R1-Serial3/0/0]ppp chap user zhuyy

[R1-Serial3/0/0]ppp chap password cipher 123456ddd      

步骤3；关闭后再开启r1 r2检查是否能通过ppp验证

1. R1与R2双向验证：

步骤 1：在R2和R3上创建用户验证R3的用户

[R2]aaa

[R2-aaa]local-user zhuyy privilege level 15 password cipher 123456ddd

[R2-aaa]local-user zhuyy service-type ppp

[R3]aaa

[R3-aaa]local-user zhuyy privilege level 15 password cipher 123456ddd

Info: Add a new user.

[R3-aaa]local-user zhuyy service-type ppp

步骤 2：在R2和R3相连的接口上配置需要进行PPP验证，验证chap，并配置对端的用户名

[R2]int Serial 3/0/1

[R2-Serial3/0/1]ppp authentication-mode chap

[R2-Serial3/0/1]ppp chap user zhuyy

[R2-Serial4/0/0]ppp authentication-mode chap

[R2-Serial4/0/0]ppp chap user zhuyy

[R3]int Serial 3/0/0

[R3-Serial3/0/0]ppp authentication-mode chap

[R3-Serial3/0/0]ppp chap user zhuyy

    [R3-Serial3/0/1]ppp authentication-mode chap

[R3-Serial3/0/1]ppp chap user zhuyy