一、实验拓扑
二、实验分析
1、R1与R2使用ppp链路直链,R2与R3用MP-GROUP配置
2、R2为主验证方,R1为被验证方(单向chap验证)
3、R2为主验证方,R3为被验证方;R3为主验证方,R2为被验证方(双向chap验证)
三、实验步骤
1、配IP地址
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip address 192.168.1.1 24
[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
[R2-Serial3/0/1]
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp mp
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2-Serial4/0/0]
[R2-Serial4/0/0]q
[R2]int
[R2]interface mp
[R2]interface Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add
[R2-Mp-group0/0/0]ip address 192.168.2.1 24
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]q
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp mp
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
[R3-Serial3/0/0]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp mp
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
[R3-Serial3/0/1]q
[R3]inter
[R3]interface mp
[R3]interface Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add
[R3-Mp-group0/0/0]ip address 192.168.2.2 24
2、ppp配置
(1)R2为主验证方,R1为被验证方
[R2]aaa
[R2-aaa]lo
[R2-aaa]local-user wangdayee pass
[R2-aaa]local-user wangdayee password c
[R2-aaa]local-user wangdayee password cipher wdy12345
[R2-aaa]lo
[R2-aaa]local-user wangdaye s
[R2-aaa]local-user wangdaye service-type ppp
[R2-aaa]q
[R2]int se
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp a
[R2-Serial3/0/0]ppp authentication-mode chap
[R1]int
[R1]interface se
[R1]interface Serial 3/0/0
[R1-Serial3/0/0]ppp chap us
[R1-Serial3/0/0]ppp chap user wangdaye
[R1-Serial3/0/0]ppp chap pas
[R1-Serial3/0/0]ppp chap password c
[R1-Serial3/0/0]ppp chap password cipher wdy12345
(2)R2为主验证方,R3为被验证方
[R2]aaa
[R2-aaa]lo
[R2-aaa]local-user zhangdayee pass
[R2-aaa]local-user zhangdayee password c
[R2-aaa]local-user zhangdayee password cipher zdy12345
[R2-aaa]local-user zhangdaye service-type ppp
[R2-aaa]q
[R2]int se
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp a
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]q
[R2]int se
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp a
[R2-Serial4/0/0]ppp authentication-mode chap
[R3]int se
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp chap u
[R3-Serial3/0/1]ppp chap user zhangdaye
[R3-Serial3/0/1]ppp chap pa
[R3-Serial3/0/1]ppp chap password c
[R3-Serial3/0/1]ppp chap password cipher zdy12345
[R3-Serial3/0/1]q
[R3]int se
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap u
[R3-Serial3/0/0]ppp chap user zhangdaye
[R3-Serial3/0/0]ppp chap pa
[R3-Serial3/0/0]ppp chap password c
[R3-Serial3/0/0]ppp chap password cipher zdy12345
(1)R3为主验证方,R2为被验证方
[R3]aaa
[R3-aaa]lo
[R3-aaa]local-user lidaye pa
[R3-aaa]local-user lidaye password c
[R3-aaa]local-user lidaye password cipher ldy12345
[R3-aaa]lo
[R3-aaa]local-user lidaye s
[R3-aaa]local-user lidaye service-type ppp
[R3-aaa]q
[R3]int se
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp a
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]
[R3-Serial3/0/0]q
[R3]int se
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp a
[R3-Serial3/0/1]ppp authentication-mode chap
[R2]int se
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp chap us
[R2-Serial3/0/1]ppp chap user lidaye
[R2-Serial3/0/1]ppp chap password c
[R2-Serial3/0/1]ppp chap password cipher ldy12345
[R2-Serial3/0/1]q
[R2]int se
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp chap us
[R2-Serial4/0/0]ppp chap user lidaye
[R2-Serial4/0/0]ppp chap pass
[R2-Serial4/0/0]ppp chap password c
[R2-Serial4/0/0]ppp chap password cipher ldy12345