pap and chap

实验拓扑：

配置：

[R1]dhcp enable 

[R1]int g 0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[R1-GigabitEthernet0/0/0]dhcp select interface 
[R1-GigabitEthernet0/0/0]dhcp server dns-list 114.114.114.114

[R1]int s 3/0/0
[R1-Serial3/0/0]ip add 10.0.14.1 24
[R1-Serial3/0/0]link-protocol hdlc 

[R1]ip route-static 0.0.0.0 0 10.0.14.4

[R1]acl 2000	
[R1-acl-basic-2000]rule 5 permit source any 
[R1]int s 3/0/0	
[R1-Serial3/0/0]nat outbound 2000

[R1]int t 0/0/0
[R1-Tunnel0/0/0]ip add 20.1.1.1 24
[R1-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R1-Tunnel0/0/0]source 10.0.14.1
[R1-Tunnel0/0/0]nhrp entry multicast dynamic 
[R1-Tunnel0/0/0]nhrp network-id 100

[R1]rip 1
[R1-rip-1]version 2
[R1-rip-1]network 192.168.1.0	
[R1-rip-1]network 20.0.0.0

[R1]int t 0/0/0	
[R1-Tunnel0/0/0]undo rip split-horizon

[R2]dhcp enable 

[R2]int g 0/0/0
[R2-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[R2-GigabitEthernet0/0/0]dhcp select interface 
[R2-GigabitEthernet0/0/0]dhcp server dns-list 114.114.114.114

[R2]int s 3/0/1
[R2-Serial3/0/1]ip add 10.0.24.2 24
[R2-Serial3/0/1]link-protocol ppp
[R2-Serial3/0/1]ppp pap local-user wds password cipher 123456

[R2]ip route-static 0.0.0.0 0 10.0.24.4

[R2]acl 2000	
[R2-acl-basic-2000]rule 5 permit source any 
[R2]int s 3/0/1
[R2-Serial3/0/1]nat outbound 2000


[R2-Serial3/0/1]int t 0/0/0
[R2-Tunnel0/0/0]ip add 20.1.1.2 24	
[R2-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R2-Tunnel0/0/0]source s 3/0/1
[R2-Tunnel0/0/0]nhrp entry 20.1.1.1 10.0.14.1 register  
[R2-Tunnel0/0/0]nhrp network-id 100

[R2]rip 1
[R2-rip-1]version 2
[R2-rip-1]network 192.168.2.0	
[R2-rip-1]network 20.0.0.0

[R3]dhcp enable 

[R3]int g 0/0/0
[R3-GigabitEthernet0/0/0]ip add 192.168.3.1 24
[R3-GigabitEthernet0/0/0]dhcp select interface 
[R3-GigabitEthernet0/0/0]dhcp server dns-list 114.114.114.114

[R3]int s 4/0/0
[R3-Serial4/0/0]ip add 10.0.34.3 24
[R3-Serial4/0/0]link-protocol ppp
[R3-Serial4/0/0]ppp chap user wds 
[R3-Serial4/0/0]ppp chap password cipher 123456 

[R3]ip route-static 0.0.0.0 0 10.0.34.4

[R3]acl 2000
[R3-acl-basic-2000]rule 5 permit source any 
[R3]int s 4/0/0
[R3-Serial4/0/0]nat outbound 2000


[R3]int t 0/0/0
[R3-Tunnel0/0/0]ip add 20.1.1.3 24	
[R3-Tunnel0/0/0]tunnel-protocol gre p2mp 
[R3-Tunnel0/0/0]source s 4/0/0	
[R3-Tunnel0/0/0]nhrp entry 20.1.1.1 10.0.14.1 register 
[R3-Tunnel0/0/0]nhrp network-id 100

[R3]rip 1
[R3-rip-1]version 2
[R3-rip-1]network 192.168.3.0	
[R3-rip-1]network 20.0.0.0

[ISP]int s 3/0/0
[ISP-Serial3/0/0]ip add 10.0.14.4 24
[ISP-Serial3/0/0]link-protocol hdlc 

[ISP]aaa
[ISP-aaa]local-user wds password cipher 123456
[ISP-aaa]local-user wds service-type ppp

[ISP]int s 3/0/1
[ISP-Serial3/0/1]ip add 10.0.24.4 24
[ISP-Serial3/0/1]link-protocol ppp
[ISP-Serial3/0/1]ppp authentication-mode pap


[ISP]int s 4/0/0
[ISP-Serial4/0/0]ip add 10.0.34.4 24
[ISP-Serial4/0/0]link-protocol ppp
[ISP-Serial4/0/0]ppp authentication-mode chap

[ISP]int l0
[ISP-LoopBack0]ip add 4.4.4.4 24

 测试：