R1端口ip配置
[R1]int s
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
[R1-Serial3/0/0]q
R2左端口ip配置
[R2]int s
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24
[R2-Serial3/0/0]
Mar 24 2024 16:43:48-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PPP
IPCP on the interface Serial3/0/0 has entered the UP state.
[R2-Serial3/0/0]q
R2--R3之间的聚合线路ip配置
R2物理口合并
[R2]int mp
[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]q
[R2]int
[R2]int s
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp mp
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2]int s
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp mp
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
ip配置
[R2]int mp
[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
[R2-Mp-group0/0/0]
R3物理口合并
[R3]int mp
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]q
[R3]int s
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp mp
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
[R3]int s
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp mp
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
ip配置
[R3]int mp
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3
R2对R1ppp的单向chap验证
主验证方
[R2]aaa
[R2-aaa]loc
[R2-aaa]local-user yuzhiwei p
[R2-aaa]local-user yuzhiwei password c
[R2-aaa]local-user yuzhiwei password cipher yzw12345
Info: Add a new user.
[R2-aaa]loc
[R2-aaa]local-user yu
[R2-aaa]local-user yuzhiwei s
[R2-aaa]local-user yuzhiwei service-type ppp ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http Http user
ssh SSH user
sslvpn Sslvpn user
telnet Telnet user
terminal Terminal user
web Web authentication user
x25-pad X25-pad user
<cr> Please press ENTER to execute command
[R2-aaa]local-user yuzhiwei service-type ppp
[R2-aaa]
[R2-aaa]
[R2-aaa]int s
[R2-aaa]q
[R2]int s
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp chap
^
Error:Incomplete command found at '^' position.
[R2-Serial3/0/0]ppp au
[R2-Serial3/0/0]ppp authentication-mode chap
[R2-Serial3/0/0]link
[R2-Serial3/0/0]link-protocol ppp
被验证方及验证过程
[R1]int s 3/0/0
[R1-Serial3/0/0]ppp chap u
[R1-Serial3/0/0]ppp chap user yuzhiwei
[R1-Serial3/0/0]ppp chap pa
[R1-Serial3/0/0]ppp chap password yzw12345
^
Error: Unrecognized command found at '^' position.
[R1-Serial3/0/0]ppp chap password c
[R1-Serial3/0/0]ppp chap password cipher yzw 12345
^
Error:Too many parameters found at '^' position.
[R1-Serial3/0/0]ppp chap password cipher yzw12345
[R1-Serial3/0/0]ping 192.168.1.2
PING 192.168.1.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=255 time=60 ms
Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.1.2: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 192.168.1.2: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 192.168.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/30/60 ms
[R1-Serial3/0/0]
实现R3与R2之间的双向验证
R2主验证R3被验证
[R2]aaa
[R2-aaa]lo
[R2-aaa]local-user weizhiyu p
[R2-aaa]local-user weizhiyu password c
[R2-aaa]local-user weizhiyu password cipher wzy12345
Info: Add a new user.
[R2-aaa]loc
[R2-aaa]local-user weizhiyu s
[R2-aaa]local-user weizhiyu service-type ppp
[R2-aaa]int s
[R2-aaa]int serial 4/0/0
[R2-Serial4/0/0]ppp au
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]link
[R2-Serial4/0/0]link-protocol ppp
[R2-Serial4/0/0]int s 3/0/1
[R2-Serial3/0/1]ppp au
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]q
[R2]
R3及其验证
[R3]ppp chap u
[R3]ppp chap user
[R3]ppp chap use
[R3]int s 3/0/1
[R3-Serial3/0/1]ppp c
[R3-Serial3/0/1]ppp chap u
[R3-Serial3/0/1]ppp chap user weizhiyu
[R3-Serial3/0/1]ppp chap p
[R3-Serial3/0/1]ppp chap password wzy12345
^
Error: Unrecognized command found at '^' position.
[R3-Serial3/0/1]ppp chap password c
[R3-Serial3/0/1]ppp chap password cipher wzy12345
[R3-Serial3/0/1]int s
[R3-Serial3/0/1]int s 3/0/0
[R3-Serial3/0/0]ppp c
[R3-Serial3/0/0]ppp chap u
[R3-Serial3/0/0]ppp chap user weizhiyu
[R3-Serial3/0/0]pp
[R3-Serial3/0/0]ppp c
[R3-Serial3/0/0]ppp chap p
[R3-Serial3/0/0]ppp chap password c
[R3-Serial3/0/0]ppp chap password cipher wzy12345
[R3-Serial3/0/0]
[R3-Serial3/0/0]q
[R3]ping 192.168.2.2
PING 192.168.2.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.2.2: bytes=56 Sequence=1 ttl=255 time=40 ms
Reply from 192.168.2.2: bytes=56 Sequence=2 ttl=255 time=10 ms
Reply from 192.168.2.2: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.2.2: bytes=56 Sequence=4 ttl=255 time=20 ms
Reply from 192.168.2.2: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 192.168.2.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/22/40 ms
[R3]
R3主R2被
[R3]aaa
[R3-aaa]lo
[R3-aaa]local-user zhiweiyu p
[R3-aaa]local-user zhiweiyu password c
[R3-aaa]local-user zhiweiyu password cipher zwy12345
Info: Add a new user.
[R3-aaa]lo
[R3-aaa]local-user zhiweiyu s
[R3-aaa]local-user zhiweiyu service-type ppp
[R3-aaa]
[R3-aaa]
[R3-aaa]int s 3/0/1
[R3-Serial3/0/1]ppp au
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]
[R3-Serial3/0/1]int s 3/0/0
[R3-Serial3/0/0]ppp au
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]q
[R3]int s 3/0/1
[R3-Serial3/0/1]li
[R3-Serial3/0/1]link-protocol ppp
[R3-Serial3/0/1]int s 3/0/0
[R3-Serial3/0/0]l
[R3-Serial3/0/0]li
[R3-Serial3/0/0]link-protocol ppp
[R3-Serial3/0/0]q
[R3]
R2及其验证
[R2-Serial4/0/0]
[R2-Serial4/0/0]ppp c
[R2-Serial4/0/0]ppp chap u
[R2-Serial4/0/0]ppp chap user zhiweiyu
[R2-Serial4/0/0]ppp c
[R2-Serial4/0/0]ppp chap p
[R2-Serial4/0/0]ppp chap password c
[R2-Serial4/0/0]ppp chap password cipher zwy12345
[R2-Serial4/0/0]int s 3/0/1
[R2-Serial3/0/1]ppp c
[R2-Serial3/0/1]ppp chap p
[R2-Serial3/0/1]ppp chap u
[R2-Serial3/0/1]ppp chap user zhiweiyu
[R2-Serial3/0/1]ppp c
[R2-Serial3/0/1]ppp chap p
[R2-Serial3/0/1]ppp chap password c
[R2-Serial3/0/1]ppp chap password cipher zwy12345
[R2-Serial3/0/1]q
[R2]q
<R2>ping 192.168.2.3
PING 192.168.2.3: 56 data bytes, press CTRL_C to break
Reply from 192.168.2.3: bytes=56 Sequence=1 ttl=255 time=20 ms
Reply from 192.168.2.3: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 192.168.2.3: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.2.3: bytes=56 Sequence=4 ttl=255 time=20 ms
Reply from 192.168.2.3: bytes=56 Sequence=5 ttl=255 time=20 ms
--- 192.168.2.3 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/20/20 ms