1,R1和R2已经使用ppp链路直连
2,R2和R3上配置PPP MP
3.配置IP地址
4,R2对R1的ppp进行单向chap验证
5.R2和R3的的PPP进行双向chap验证
步骤 1:在 R2 上创建 MP-GROUP 口
步骤 2:把 S3/0/1 和 S4/0/0 加入到上一步创建的 MP-GROUP口
[R2]interface Mp-group0/0/0
[R2]int s3/0/1
[R2-Serial3/0/1]ppp mp Mp-group0/0/0
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp mp Mp-group0/0/0
[R3]int Mp-group0/0/0
[R3-Mp-group0/0/0]int s3/0/0
[R3-Serial3/0/0]ppp mp Mp-group0/0/0
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp mp Mp-group0/0/0
[R1]int s3/0/0
[R1-Serial3/0/0]ip address 192.168.1.1 24
[R2]int s3/0/0
[R2-Serial3/0/0]ip address 192.168.1.2 24
R2 和 R3 的MP-Group口上配置IP地址
[R2]interface Mp-group0/0/0
[R2-Mp-group0/0/0]ip address 192.168.2.2 24
[R3]interface Mp-group0/0/0
[R3-Mp-group0/0/0]ip address 192.168.2.3 24
主验证方:配置用户列表及验证方式
[R2]aaa
[R2-aaa]local-user zz password cipher 123
Info: Add a new user.
[R2-aaa]local-user zz service-type ppp
[R2-aaa]int s3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap 设置验证类型
[R1]int s3/0/0
[R1-Serial3/0/0]ppp chap user zz
[R1-Serial3/0/0]ppp chap password cipher 123
# R2先作为主认证方
[R2]aaa
[R2-aaa]local-user zz password cipher 123
[R2-aaa]local-user zz service-type ppp
[R2-aaa]int s3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]link-protocol ppp
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]link-protocol ppp
R3作为被认证方
[R3]int s3/0/0
[R3-Serial3/0/0]ppp chap user zz
[R3-Serial3/0/0]ppp chap password cipher 123
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp chap user zz
[R3-Serial3/0/1]ppp chap password cipher 123
R3作为认证方
[R3]aaa
[R3-aaa]local-user zz password cipher 123
[R3-aaa]local-user zz service-type ppp
[R3-aaa]int s3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]link-protocol ppp
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]link-protocol ppp
R2作为被认证方
[R2]int s3/0/1
[R2-Serial3/0/1]ppp chap user zz
[R2-Serial3/0/1]ppp chap password cipher 123
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp chap user zz
[R2-Serial4/0/0]ppp chap password cipher 123
验证是否成功:
接口处shutdown后undo shutdown,看是否有两次开启信息,若有,即配置成功