实验要求
1、R1 和 R2 使用 PPP 链路直连,R2和R3 把2条 PPP 链路捆绑为 PPP MP 直连
2、按照图示配置 IP 地址
3、R2对R1的PPP进行单向 chap 验证
4、R2和R3的PPP进行双向 chap 验证
实验拓扑
配置
1、如图,R1 和 R2 已使用 PPP 链路直连
2、R2 和 R3上配置 PPP MP
# 步骤 1:在 R2 上创建 MP-GROUP 口
# 步骤 2:把 S3/0/1 和 S4/0/0 加入到上一步创建的 MP-GROUP口
[r2]interface Mp-group0/0/0
[r2]int s3/0/1
[r2-Serial3/0/1]ppp mp Mp-group0/0/0
[r-Serial3/0/1]int s4/0/0
[r-Serial4/0/0]ppp mp Mp-group0/0/0
[r3]int Mp-group0/0/0
[r3-Mp-group0/0/0]int s3/0/0
[r3-Serial3/0/0]ppp mp Mp-group0/0/0
[r3-Serial3/0/0]int s3/0/1
[r3-Serial3/0/1]ppp mp Mp-group0/0/0
3、配置IP地址
[r1]int s3/0/0
[r1-Serial3/0/0]ip address 192.168.1.1 24
[r2]int s3/0/0
[r2-Serial3/0/0]ip address 192.168.1.2 24
# r2 和 r3 的MP-Group口上配置IP地址
[r2]interface Mp-group0/0/0
[r2-Mp-group0/0/0]ip address 192.168.2.2 24
[r3]interface Mp-group0/0/0
[r3-Mp-group0/0/0]ip address 192.168.2.3 24
测试r1和r2之间是否连通
4、R2对R1的PPP进行单向 chap 验证
在R2的Serial3/0/0口上设置验证类型
主验证方:配置用户列表及验证方式
[r2]aaa
[r2-aaa]local-user hw password cipher 123
Info: Add a new user.
[r2-aaa]local-user hw service-type ppp
[r2-aaa]int s3/0/0
[r2-Serial3/0/0]ppp authentication-mode chap # 设置验证类型
在R1的Serial3/0/0口上配置用于验证的用户名和密码
[r1]int s3/0/0
[r1-Serial3/0/0]ppp chap user hw
[r1-Serial3/0/0]ppp chap password cipher 123
5、R2和R3的PPP进行双向 chap 验证
# R2先作为主认证方
[r2]aaa
[r2-aaa]local-user hw password cipher 123
[r2-aaa]local-user hw service-type ppp
[r2-aaa]int s3/0/1
[r2-Serial3/0/1]ppp authentication-mode chap
[r2-Serial3/0/1]link-protocol ppp
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp authentication-mode chap
[r2-Serial4/0/0]link-protocol ppp
# R3作为认证方
[r3]aaa
[r3-aaa]local-user hw password cipher 123
[r3-aaa]local-user hw service-type ppp
[r3-aaa]int s3/0/0
[r3-Serial3/0/0]ppp authentication-mode chap
[r3-Serial3/0/0]link-protocol ppp
[r3-Serial3/0/0]int s3/0/1
[r3-Serial3/0/1]ppp authentication-mode chap
[r3-Serial3/0/1]link-protocol ppp
# R2作为被认证方
[r2]int s3/0/1
[r2-Serial3/0/1]ppp chap user hw
[r2-Serial3/0/1]ppp chap password cipher 123
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp chap user hw
[r2-Serial4/0/0]ppp chap password cipher 123
验证是否成功:
接口处shutdown后undo shutdown,看是否有两次开启信息,若有,即配置成功