先对接口进行划分
AR1的Serial3/0/0接口:192.168.1.1/24;
AR2的Serial3/0/0接口:192.168.1.2/24;
AR2的Serial3/0/1和4/0/0的聚合接口:192.168.2.2/24;
AR3的Serial3/0/0和3/0/1的聚合接口:192.168.2.3/24
[R1]int s3/0/0
[R1-Serial3/0/0]ip address 192.168.1.1 24
R1
MP聚合R2
[R2]int s 3/0/0
[R2-Serial3/0/0]ip address 192.168.1.2 24
[R2]inter Mp-group 0/0/0
[R2-Mp-group0/0/0]ip ad 192.168.2.2 24
[R2-Mp-group0/0/0]q
[R2]inter ser3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
[R2-Serial3/0/1]inter s4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
MP聚合R3
[R3]inter Mp-group 0/0/0
[R3-Mp-group0/0/0]ip address 192.168.2.3 24
[R3]inter s3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
[R3-Serial3/0/0]inter s3/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
接下来进行单向chap验证
R2做主验证方,R1做被验证方
主验证方:配置用户列表及验证方式
[R2]aaa
[R2-aaa]local-user wangdaye password cipher wdy12345
[R2-aaa]local-user wangdaye service-type ppp
[R2]inter s3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
被验证方:配置验证用户名
[R1]int s3/0/0
[R1-Serial3/0/0]ppp chap user wangdaye
[R1-Serial3/0/0]ppp chap password cipher wdy123456
验证可以ping通,且接口都为up
双向chap验证
R2做主验证方,R3做被验证方
主验证方:配置用户列表及验证方式
[R2]aaa
[R2-aaa]local-user wangdaye password cipher wdy12345
[R2-aaa]local-user wangdaye service-type ppp
[R2]inter s3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]int s4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
被验证方:配置验证用户名
[r3]int s3/0/0
[r3-Serial3/0/0]ppp chap user wangdaye
[r3-Serial3/0/0]ppp chap password cipher wdy12345
[r3-Serial3/0/0]int s3/0/1
[r3-Serial3/0/1]ppp chap user wangdaye
[r3-Serial3/0/1]ppp chap password cipher wdy12345
验证可以ping通,且接口都为up
R3做主验证方,R2做被验证方
主验证方:配置用户列表及验证方式
[R3]aaa
[R3-aaa]local-user zhangdaye password cipher zdy12345
[R3-aaa]local-user zhangdaye service-type ppp
[R3]int s3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]int s3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
被验证方:配置验证用户名
[R2]int s3/0/1
[R2-Serial3/0/1]ppp chap user zhangdaye
[R2-Serial3/0/1]ppp chap password cipher zdy12345
[R2-Serial3/0/1]inter s4/0/0
[R2-Serial4/0/0]ppp chap user zhangdaye
[R2-Serial4/0/0]ppp chap password cipher zdy12345
验证可以ping通,且接口都为up