PPP实验

一、实验拓扑

二、实验要求

1、R1和R2使用PPP链路直连，R2和R3把2条PPP链路捆绑为PPP MP直连
2、按照图示配置IP地址
3、R2对R1的ppp进行单向chap验证
4、R2和R3的ppp进行双向chap验证

三、实验思路

1、创建MP-GROUP接口，将R2和R3的接口加入MP-GROUP组，实现R2和R3间的2条PPP链路捆绑为PPP MP直连

2、利用图示给出的IP地址，给设备配置IP地址

3、从要求3中可得：R2为主验证方，R1为被验证方，配置ppp进行单向chap验证

4、从要求4中可得：R2为主验证方时，R3为被验证方；而R3为主验证方时，R2为被验证方，配置ppp进行双向chap验证

四、实验操作

1、用MP-GROUP配置将2条PPP链路捆绑为PPP MP直连

R2：

[R2]int Mp-group 0/0/0

[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0

[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0

R3：

[R3]int Mp-group 0/0/0

[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0

[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0

2、配置IP地址

R1：

[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24

R2：

[R2]int Serial 3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24

[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24

R3：

[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24

3、配置ppp进行单向chap验证

R2：

[R2]aaa
[R2-aaa]local-user gujiangshan password cipher gjs12345
[R2-aaa]local-user gujiangshan service-type ppp
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap

R1：

[R1]int Serial 3/0/0
[R1-Serial3/0/0]ppp chap user gujiangshan
[R1-Serial3/0/0]ppp chap password cipher gjs12345

测试：将接口关闭再启动后，用R1  ping  R2

[R1]int Serial 3/0/0
[R1-Serial3/0/0]shutdown 

[R1]int Serial 3/0/0
[R1-Serial3/0/0]undo shutdown 

4、配置ppp进行双向chap验证

（1）R2为主验证方，R3为被验证方

[R2]aaa
[R2-aaa]local-user bianboxian password cipher bbx1234
[R2-aaa]local-user bianboxian service-type ppp
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap

   
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap user bianboxian
[R3-Serial3/0/0]ppp chap password cipher bbx1234
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp chap user bianboxian
[R3-Serial3/0/1]ppp chap password cipher bbx1234

（2）R3为主验证方，R2为被验证方  -----   当用户密码与第一次相同时，密码步骤可省略

[R3]aaa
[R3-aaa]local-user bianboxian password cipher bbx1234
[R3-aaa]local-user bianboxian service-type ppp
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap   
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp authentication-mode  chap

[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp chap user bianboxian
[R2-Serial3/0/1]ppp chap password cipher bbx1234
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp chap user bianboxian

测试：将接口关闭再启动后，用R2  ping  R3   ----   两个接口都要关闭

[R2]int Serial 3/0/1
[R2-Serial3/0/1]shutdown 

[R2]int Serial 4/0/0
[R2-Serial4/0/0]shutdown 

[R2]int Serial 4/0/0
[R2-Serial4/0/0]undo shutdown 

[R2]int Serial 3/0/1
[R2-Serial3/0/1]undo shutdown