一、实验拓扑
二、实验要求
1、R1和R2使用PPP链路直连,R2和R3把2条PPP链路捆绑为PPP MP直连
2、按照图示配置IP地址
3、R2对R1的PPP进行单向chap验证
4、R2和R3的PPP进行双向chap验证
三、实验配置
1、配置IP地址
R1
R2
R3
2、PPP MP
R2上
[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]q
[R2]int s4/0/1
[R2-Serial4/0/1]ppp mp Mp-group 0/0/0
[R2-Serial4/0/1]int s3/0/0
[R2-Serial3/0/0]ppp mp Mp-group 0/0/0
R3上
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]q
[R3]int s4/0/1
[R3-Serial4/0/1]ppp mp Mp-group 0/0/0
[R3-Serial4/0/1]int s4/0/0
[R3-Serial4/0/0]ppp mp Mp-group 0/0/0
3、配置R2对R1的PPP单向chap验证
主验证方
[R2]aaa
[R2-aaa]local-user lzq password cipher lzq123456
[R2-aaa]local-user lzq service-type ppp
[R2-aaa]int s4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]link-protocol ppp
被验证方
[R1]int s4/0/0
[R1-Serial4/0/0]ppp chap user lzq
[R1-Serial4/0/0]ppp chap password cipher lzq123456
验证
R1接口双up
可以ping通,实验成功
4、R2和R3的PPP双向chap验证
R2为主验证方:
主验证方
[R2]aaa
[R2-aaa]local-user gdt password cipher gdt123456
[R2-aaa]local-user gdt service-type ppp
[R2-aaa]int s4/0/1
[R2-Serial4/0/1]ppp authentication-mode chap
[R2-Serial4/0/1]link-protocol ppp
[R2-Serial4/0/1]int s3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
[R2-Serial3/0/0]link-protocol ppp
被验证方
[R3]int s4/0/1
[R3-Serial4/0/1]ppp chap user gdt
[R3-Serial4/0/1]ppp chap password cipher gdt123456
[R3-Serial4/0/1]int s4/0/0
[R3-Serial4/0/0]ppp chap user gdt
[R3-Serial4/0/0]ppp chap password cipher gdt123456
验证
R3接口双up
可以ping通,R2对R3的验证成功
R3为主验证方
主验证方
[R3]aaa
[R3-aaa]local-user lsm password cipher lsm123456
[R3-aaa]int s4/0/0
[R3-Serial4/0/0]ppp authentication-mode chap
[R3-Serial4/0/0]link-protocol ppp
[R3-Serial4/0/0]int s4/0/1
[R3-Serial4/0/1]ppp authentication-mode chap
[R3-Serial4/0/1]link-protocol ppp
被验证方
[R2]int s4/0/1
[R2-Serial4/0/1]ppp chap user lsm
[R2-Serial4/0/1]ppp chap password cipher lsm123456
[R2-Serial4/0/1]int s3/0/0
[R2-Serial3/0/0]ppp chap user lsm
[R2-Serial3/0/0]ppp chap password cipher lsm123456
验证
R2双up
可以ping通,R3对R2的验证成功
R2和R3的ppp双向chap验证成功