- 实验拓扑图
- 实验要求
- R1和R2使用ppp链路直连,R2和R3把2条ppp链路捆绑为ppp MP直连
- 按照图示配置IP地址
- R2对R1的ppp进行单向chap验证
- R2和R3的ppp进行双向chap验证
- 实验步骤
- 配置IP地址,在R2、R3上做捆绑
[R1]int serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
[R2]int s3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24
[R2]int mp-group 0/0/0
[R2-Mp-group0/0/0]
[R3]int mp-group 0/0/0
[R3-Mp-group0/0/0]
2、把逻辑口加到物理口里面
[R2]int s3/0/1
[R2-Serial3/0/1]ppp mp mp-group 0/0/0
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp mp mp-group 0/0/0
[R3]int s3/0/0
[R3-Serial3/0/0]ppp mp mp-group 0/0/0
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp mp mp-group 0/0/0
3、配地址
[R3]int mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24
[R2]int mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
R2对R1做认证
主验证方R2
[R2]aaa
[R2-aaa]local-user wangdaye password cipher wdy12345
Info: Add a new user.
[R2-aaa]local-user wangdaye service-type ppp
[R2-aaa]quit
[R2]int s3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
被验证方R1
[R1]int s3/0/0
[R1-Serial3/0/0]ppp chap user wangdaye
[R1-Serial3/0/0]ppp chap password cipher wdy12345
[R1-Serial3/0/0]
[R1-Serial3/0/0]shutdown
[R1-Serial3/0/0]undo shutdown
双向验证
R2(主验证)
[R2]aaa
[R2-aaa]local-user zhangdaye password cipher zdy12345
Info: Add a new user.
[R2-aaa]local-user zhangdaye service-type ppp
[R2-aaa]
[R2-aaa]quit
[R2]int s3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
R3(被验证)
[R3-Serial3/0/0]ppp chap user zhangdaye
[R3-Serial3/0/0]ppp chap password cipher zdy12345
[R3]int s3/0/1
[R3-Serial3/0/1]ppp chap user zhangdaye
[R3-Serial3/0/1]ppp chap password cipher zdy12345
R3(主验证方)
[R3]aaa
[R3-aaa]local-user liudaye password cipher ldy12345
Info: Add a new user.
[R3-aaa]local-user liudaye service-type ppp
[R3-aaa]quit
[R3]int s3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]quit
[R3]int s3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
R2(被验证方)
[R2]INT s3/0/1
[R2-Serial3/0/1]ppp chap user liudaye
[R2-Serial3/0/1]ppp chap password cipher ldy12345
[R2-Serial3/0/1]quit
[R2]int s4/0/0
[R2-Serial4/0/0]ppp chap user liudaye
[R2-Serial4/0/0]ppp chap password cipher ldy12345
[R2-Serial4/0/0]quit
做认证
[R2]int s3/0/1
[R2[R2-Serial3/0/1]int s4/0/0
[R2-[R2-Serial4/0/0]undo shu[R2-Serial4/0/0]int s3/0/1
[R2-Serial3/0/1]undo shutdowntdownSerial4/0/0]shutdown-Serial3/0/1]shutdown