一、实验拓扑
二、实验需求
1.R1和R2使用ppp链路直连,R2和R3把2条PPP链路捆绑为ppp MP直连
2.按照图示配置IP地址
3.R2对R1的ppp进行单向chap验证
4.R2和R3的ppp进行双向chap验证
三、实验思路
1.配置相应的IP地址,先把R2和R3进行捆绑后进行配置IP地址
2.R2对R1做验证,R2为主认证方,R1为被验证方,把R1接口关闭后再开启,并测试
3.R2与R3相互做主认证方与被认证方,并测试
四、实验步骤
1.配置IP地址
[R1]int s3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
[R2]int s3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24
[R2-Serial3/0/0]ip add 192.168.1.2 24
[R2]interface mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
[R2-Serial4/0/0]ppp mp mp-group 0/0/0
[R2-Serial4/0/0]int s3/0/1
[R2-Serial3/0/1]ppp mp mp-group 0/0/0
[R3]interface mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24
[R3-Mp-group0/0/0]quit
[R3]int s3/0/1
[R3-Serial3/0/1]ppp mp mp-group 0/0/0
[R3-Serial3/0/1]int s3/0/0
[R3-Serial3/0/0]ppp mp mp-group 0/0/0
2.R2对R1做验证
[R2]aaa
[R2-aaa]local-user xiaoyu password cipher xy12345
[R2-aaa]local-user xiaoyu service-type ppp
[R2-aaa]int s3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
[R1]int s3/0/0
[R1-Serial3/0/0]ppp chap user xiaoyu
[R1-Serial3/0/0]ppp chap password cipher xy12345
[R1]int s3/0/0
[R1-Serial3/0/0]shutdown
[R1-Serial3/0/0]undo shutdown
测试:
3.R2与R3相互做主认证方与被认证方,并测试
R2主认证方:
[R2]aaa
[R2-aaa]local-user xiaoli password cipher xl12345
[R2-aaa]local-user xiaoli service-type ppp
[R2-aaa]int s4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]int s3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R3]int s3/0/1
[R3-Serial3/0/1]ppp chap user xiaoli
[R3-Serial3/0/1]ppp chap password cipher xl12345
[R3-Serial3/0/1]int s3/0/0
[R3-Serial3/0/0]ppp chap user xiaoli
[R3-Serial3/0/0]ppp chap password cipher xl12345
R3主认证方:
[R3]aaa
[R3-aaa]local-user zizi password cipher zz12345
[R3-aaa]local-user zizi service-type ppp
[R3-aaa]quit
[R3]int s3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]int s3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R2]int s4/0/0
[R2-Serial4/0/0]ppp chap user zizi
[R2-Serial4/0/0]ppp chap password cipher zz12345
[R2-Serial4/0/0]int s3/0/1
[R2-Serial3/0/1]ppp chap user zizi
[R2-Serial3/0/1]ppp chap password cipher zz12345
[R2]int s4/0/0
[R2-Serial4/0/0]shutdown
[R2-Serial4/0/0]int s3/0/1
[R2-Serial3/0/1]shutdown
[R2-Serial3/0/1]undo shutdown
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]undo shutdown
测试: