实验思路:
- 配置IP
- 将R3和R2链路绑定之后,再进行IP配置
- 将R1和R2进行单向chap验证,分清主验证和被验证。
- 在进行R2和R3双向chap验证时,R2和R3即是主验证也是被验证
实验步骤:
1.配置IP
[r1]interface Serial 4/0/0
[r1-Serial4/0/0]ip address 192.168.1.1 24
[r2]interface Serial 4/0/0
[r2-Serial4/0/0]ip address 192.168.1.2 24
2.绑定R3和R2且配置IP
[r2]interface Mp-group 0/0/1
[r2-Mp-group0/0/1]ip address 192.168.2.1 24
[r2-Serial3/0/0]ppp mp mp-group 0/0/1
[r2-Serial3/0/1]ppp mp Mp-group 0/0/1
[r3-Mp-group0/0/1]ip address 192.168.2.2 24
[r3-Serial4/0/0]ppp mp Mp-group 0/0/1
[r3-Serial4/0/1]ppp mp Mp-group 0/0/1
3.进行R1和R2单向chap验证
主验证:
[r2]aaa
[r2-aaa]local-user wangbohao password cipher 123456
Info: Add a new user.
[r2-aaa]local-user wangbohao service-type ppp
[r2-aaa]q
[r2]interface Serial 4/0/0
[r2-Serial4/0/0]ppp au
[r2-Serial4/0/0]ppp authentication-mode chap
[r2-Serial4/0/0]link-p
[r2-Serial4/0/0]link-protocol ppp
被验证:
[r1]interface Serial 4/0/0
[r1-Serial4/0/0]ppp chap user wangbohao
[r1-Serial4/0/0]ppp chap password cipher 123456
4.进行R2和R3的chap双向认证
R3主:
[r3]aaa
[r3-aaa]local-user wangbohao password cipher 123456
Info: Add a new user.
[r3-aaa]local-user wangbohao service-type ppp
[r3]interface Serial 4/0/0
[r3-Serial4/0/0]ppp authentication-mode chap
[r3-Serial4/0/0]link-protocol ppp
[r2]interface Serial 3/0/0
[r2-Serial3/0/0]ppp chap user wangbohao
[r2-Serial3/0/0]ppp chap password cipher 123456
R2主:
[r2]aaa
[r2-aaa]local-user wangbohao password cipher 123456
[r2-aaa]local-user wangbohao service-type ppp
[r2]interface Serial 3/0/1
[r2-Serial3/0/1]ppp authentication-mode chap
[r2-Serial3/0/1]link-protocol ppp
[r3]interface Serial 4/0/1
[r3-Serial4/0/1]ppp chap user wangbohao
[r3-Serial4/0/1]ppp chap password cipher 123456