实验拓扑与要求如下所示:
思路:
1.连接好拓扑后,先配置IP
2.先对R1和R2进行单向chap验证,这里我们令R2为主动方,R1为被动方
3.R2和R3之间进行双向chap验证,双方都可以为主动方和被动方
开始操作:
R1和R2进行单向chap验证:
我们先对R2进行操做:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R2
[R2]int s3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24
配置好IP后开始进行ppp模式:
[R2-Serial3/0/0]aaa
[R2-aaa]lo
[R2-aaa]local-user lt p
[R2-aaa]local-user lt password c
[R2-aaa]local-user lt password cipher 123456
Info: Add a new user.
[R2-aaa]lo
[R2-aaa]local-user lt s
[R2-aaa]local-user lt service-type ppp
[R2-aaa]int s3/0/0
[R2-Serial3/0/0]ppp au
[R2-Serial3/0/0]ppp authentication-mode c
[R2-Serial3/0/0]ppp authentication-mode chap
[R2-Serial3/0/0]l
[R2-Serial3/0/0]link-protocol ppp
[R2-Serial3/0/0]
对R1进行配置:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R1
[R1]int s 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
[R1-Serial3/0/0]
Mar 24 2024 17:10:16-08:00 R1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PPP
IPCP on the interface Serial3/0/0 has entered the UP state.
[R1-Serial3/0/0]ppp c
[R1-Serial3/0/0]ppp chap u
[R1-Serial3/0/0]ppp chap user lt
[R1-Serial3/0/0]ppp chap user lt pa
[R1-Serial3/0/0]ppp chap user lt
[R1-Serial3/0/0]ppp c
[R1-Serial3/0/0]ppp chap p
[R1-Serial3/0/0]ppp chap password c
[R1-Serial3/0/0]ppp chap password cipher 123456
[R1-Serial3/0/0]
配置好即可
R2和R3把2条PPP链路捆绑为PPP MP直连,R2和R3之间进行双向chap验证:
1.首先进行 ppp MP 配置:
对R2:
[R2]int m
[R2]int MFR
[R2]int Mp-group0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.1 24
[R2-Mp-group0/0/0]int s3/0/1
[R2-Serial3/0/1]ppp mp m
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
Mar 24 2024 17:16:58-08:00 R2 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol PPP
on the interface Serial3/0/1 has entered the DOWN state.
[R2-Serial3/0/1]
[R2-Serial3/0/1]
Mar 24 2024 17:17:02-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol PPP
on the interface Serial3/0/1 has entered the UP state.
[R2-Serial3/0/1]int s 4/0/0
[R2-Serial4/0/0]ppp mp m
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2-Serial4/0/0]
Mar 24 2024 17:17:19-08:00 R2 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol PPP
on the interface Serial4/0/0 has entered the DOWN state.
[R2-Serial4/0/0]
Mar 24 2024 17:17:22-08:00 R2 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol PPP
on the interface Serial4/0/0 has entered the UP state.
[R2-Serial4/0/0]
对于R3:
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R3
[R3]int m
[R3]int MFR
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.2 24
[R3-Mp-group0/0/0]int s3/0/0
[R3-Serial3/0/0]ppp mp m
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
Mar 24 2024 17:20:08-08:00 R3 %%01IFNET/4/LINK_STATE(l)[4]:The line protocol PPP
on the interface Serial3/0/0 has entered the DOWN state.
[R3-Serial3/0/0]
[R3-Serial3/0/0]int s
Mar 24 2024 17:20:14-08:00 R3 %%01IFNET/4/LINK_STATE(l)[5]:The line protocol PPP
on the interface Serial3/0/0 has entered the UP state.
[R3-Serial3/0/0]int s
Mar 24 2024 17:20:14-08:00 R3 %%01IFNET/4/LINK_STATE(l)[6]:The line protocol PPP
on the interface Mp-group0/0/0 has entered the UP state.
[R3-Serial3/0/0]int s
Mar 24 2024 17:20:14-08:00 R3 %%01IFNET/4/LINK_STATE(l)[7]:The line protocol PPP
IPCP on the interface Mp-group0/0/0 has entered the UP state.
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp mp m
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
Mar 24 2024 17:20:32-08:00 R3 %%01IFNET/4/LINK_STATE(l)[8]:The line protocol PPP
on the interface Serial3/0/1 has entered the DOWN state.
[R3-Serial3/0/1]
[R3-Serial3/0/1]
Mar 24 2024 17:20:38-08:00 R3 %%01IFNET/4/LINK_STATE(l)[9]:The line protocol PPP
on the interface Serial3/0/1 has entered the UP state.
[R3-Serial3/0/1]
R2和R3之间进行双向chap验证:
首先是R3为主,R2为被:
对于R3:
[R3]aaa
[R3-aaa]lo
[R3-aaa]local-user lt p
[R3-aaa]local-user lt password c
[R3-aaa]local-user lt password cipher 123456
Info: Add a new user.
[R3-aaa]lo
[R3-aaa]local-user lt s
[R3-aaa]local-user lt service-type ppp
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp a
[R3-Serial3/0/1]ppp authentication-mode c
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]l
[R3-Serial3/0/1]lapb
[R3-Serial3/0/1]link-protocol ppp
[R3-Serial3/0/1]int s4/0/0
[R3-Serial4/0/0]ppp a
[R3-Serial4/0/0]ppp authentication-mode c
[R3-Serial4/0/0]ppp authentication-mode chap
[R3-Serial4/0/0]l
[R3-Serial4/0/0]lapb
[R3-Serial4/0/0]link-protocol ppp
[R3-Serial4/0/0]
对于R2:
[R2]int s3/0/1
[R2-Serial3/0/1]ppp c
[R2-Serial3/0/1]ppp chap u
[R2-Serial3/0/1]ppp chap user lt
[R2-Serial3/0/1]ppp c
[R2-Serial3/0/1]ppp chap p
[R2-Serial3/0/1]ppp c
[R2-Serial3/0/1]ppp chap p
[R2-Serial3/0/1]ppp chap password c
[R2-Serial3/0/1]ppp chap password cipher 123456
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp c
[R2-Serial4/0/0]ppp chap u
[R2-Serial4/0/0]ppp chap user lt
[R2-Serial4/0/0]ppp c
[R2-Serial4/0/0]ppp chap p
[R2-Serial4/0/0]ppp chap password c
[R2-Serial4/0/0]ppp chap password cipher 123456
[R2-Serial4/0/0]
然后是R3为被,R2为主:
对于R3:
[R3]int s3/0/1
[R3-Serial3/0/1]ppp c
[R3-Serial3/0/1]ppp chap u
[R3-Serial3/0/1]ppp chap user ltt
[R3-Serial3/0/1]ppp c
[R3-Serial3/0/1]ppp chap p
[R3-Serial3/0/1]ppp c
[R3-Serial3/0/1]ppp chap p
[R3-Serial3/0/1]ppp chap password c
[R3-Serial3/0/1]ppp chap password cipher 1234567
[R3-Serial3/0/1]int s3/0/0
[R3-Serial3/0/0]ppp c
[R3-Serial3/0/0]ppp chap u
[R3-Serial3/0/0]ppp chap user ltt
[R3-Serial3/0/0]ppp c
[R3-Serial3/0/0]ppp chap p
[R3-Serial3/0/0]ppp chap password c
[R3-Serial3/0/0]ppp chap password cipher 1234567
[R3-Serial3/0/0]
对于R2:
[R2]aaa
[R2-aaa]lo
[R2-aaa]local-user ltt p
[R2-aaa]local-user ltt password c
[R2-aaa]local-user ltt password cipher 1234567
Info: Add a new user.
[R2-aaa]lo
[R2-aaa]local-user ltt s
[R2-aaa]local-user ltt service-type ppp
[R2-Serial3/0/0]int s3/0/1
[R2-Serial3/0/1]ppp a
[R2-Serial3/0/1]ppp authentication-mode c
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]l
[R2-Serial3/0/1]lapb
[R2-Serial3/0/1]link-protocol ppp
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp a
[R2-Serial4/0/0]ppp authentication-mode c
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]l
[R2-Serial4/0/0]lapb
[R2-Serial4/0/0]link-protocol ppp
[R2-Serial4/0/0]