步骤一:将R2和R3 ppp链路捆绑成 ppp MP直连
R2:
[R2]interface Mp-group 0/0/1
[R2-Mp-group0/0/1]q
[R2]int s 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/1
[R2-Serial3/0/1]q
[R2]int s 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/1
R3
[R3]int Mp-group 0/0/1
[R3-Mp-group0/0/1]q
[R3]int s 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/1
步骤二:配置IP地址
R1:
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip address 192.168.1.1 24
R2
[R2]int Mp-group 0/0/1
[R2-Mp-group0/0/1]ip address 192.168.2.2 24
R3
[R3]int Mp-group 0/0/1
[R3-Mp-group0/0/1]ip address 192.168.2.3 24
步骤三:R2对R1ppp单向chap验证
R2作为主验证方
[R2]aaa
[R2-aaa]local-user zhangdaye password cipher zdy123
Info: Add a new user.
[R2-aaa]local-user zhangdaye service-type ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http Http user
ppp PPP user
ssh SSH user
sslvpn Sslvpn user
telnet Telnet user
terminal Terminal user
web Web authentication user
x25-pad X25-pad user
[R2-aaa]local-user zhangdaye service-type ppp
[R2-aaa]q
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
R1作为被验证方
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ppp chap user zhangdaye
[R1-Serial3/0/0]ppp chap password cipher zdy123
步骤四:R2和R3的PPP进行双向chap验证
1,R2作为主验证方,R3作为被验证方
R2
[R2]aaa
[R2-aaa]loal
[R2-aaa]local-user liudaye password cipher ldy123
Info: Add a new user.
[R2-aaa]local-user liudaye service-type ppp
[R2-aaa]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
//两个接口都要
R3
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap user liudaye
[R3-Serial3/0/0]ppp chap password cipher ldy123
2,R3作为主验证方,R2作为被验证方
R2
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp chap user liudaye
[R2-Serial3/0/1]ppp chap password cipher ldy123
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp chap password cipher ldy123
R3
[R3]aaa
[R3-aaa]local-user liudaye password cipher ldy123
Info: Add a new user.
[R3-aaa]local-user liudaye service-type ppp
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap