华为pap和chap的配置。

版权声明:本文为博主原创文章,遵循 CC 4.0 BY-SA 版权协议,转载请附上原文出处链接和本声明。
本文链接:https://blog.csdn.net/weixin_33966365/article/details/85208751

PAP 验证举例

1. 组网需求

如图1-2所示,路由器Quidway1 和Quidway2 之间用接口Serial3/0/0 互连,要求路

由器Quidway1 用PAP方式验证路由器Quidway2。

clip_image002

3. 配置步骤

(1) 配置路由器Quidway1:

[Quidway]aaa

[Quidway-aaa]local-user quidway2 password simple quidway

[Quidway-aaa] quit

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.1 255.0.0.0

[Quidway-Serial3/0/0] ppp authentication-mode pap

(2) 配置路由器Quidway2:

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.2 255.0.0.0

[Quidway-Serial3/0/0] ppp pap local-user quidway2 password simple quidway

CHAP 验证举例

1. 组网需求

在图1-2中,要求路由器Quidway1 用CHAP方式验证路由器Quidway2。

2. 配置步骤

在配置本地被对端以CHAP 方式验证时,作为Client 端在接口下与CHAP 相关

的配置有:

ppp chap user username

ppp chap password { cipher | simple } password

方法1:

作为认证端(Quidway1)的接口底下没有配置ppp chap user username

(1) 配置路由器Quidway1:

[Quidway]aaa

[Quidway-aaa] local-user quidway1 password simple hello

[Quidway-aaa] quit

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.1 255.0.0.0

[Quidway-Serial3/0/0] link-protocol ppp

[Quidway-Serial3/0/0] ppp authentication-mode chap

(2) 配置路由器Quidway2:

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.2 255.0.0.0

[Quidway-Serial3/0/0] link-protocol ppp

[Quidway-Serial3/0/0] ppp chap user quidway1

[Quidway-Serial3/0/0] ppp chap password simple hello

方法2:

作为认证端(Quidway1)的接口底下配置了ppp chap user username,例如quidway2。

这时如果被认证端(Quidway2)的AAA 中添加配置:

local-user quidway2 password simple hello

则不用在接口Serial3/0/0 下配置ppp chap password

(3) 配置路由器Quidway1:

[Quidway]aaa

[Quidway-aaa] local-user quidway1 password simple hello

[Quidway-aaa] quit

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.1 255.0.0.0

[Quidway-Serial3/0/0] link-protocol ppp

[Quidway-Serial3/0/0] ppp chap user quidway2

[Quidway-Serial3/0/0] ppp authentication-mode chap

(4) 配置路由器Quidway2:

[Quidway] aaa

[Quidway-aaa] local-user quidway2 password simple hello

[Quidway] interface serial 3/0/0

[Quidway-Serial3/0/0] ip address 10.110.0.2 255.0.0.0

[Quidway-Serial3/0/0] link-protocol ppp

[Quidway-Serial3/0/0] ppp chap user quidway1

没有更多推荐了,返回首页