实验八 PPP与广域网链路测试<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

一、拓扑图

<?xml:namespace prefix = v ns = "urn:schemas-microsoft-com:vml" />

 

二、实验目标

（ 1 ）掌握 PPP 的基本配置，掌握串行链路的调试方法和链路通信质量方法

（ 2 ）理解 PPP 的协商过程，掌握 PPP 协议的调试方法。

（ 3 ）掌握 PPP 认证的配置方法，理解 PAP 、 CHAP 认证过程，掌握 PPP 认证调试方法。

（ 4 ）掌握 PPP Multilink 的配置方法及调试

 

三、实验内容及测试

（1）本信息配置

Router>enable

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#no ip domain-lookup

Router(config)#line console 0

Router(config-line)# logging synchronous

Router(config-line)# exec-timeout 0 0

Router(config-line)# no login

Router(config-line)#line aux 0

Router(config-line)# logging synchronous

Router(config-line)# exec-timeout 0 0

Router(config-line)# no login

Router(config-line)# privilege level 15

Router(config-line)#line vty 0 4

Router(config-line)# no login

Router(config-line)# privilege level 15

Router(config-line)#exit

Router(config)#no cdp run

Router(config)#no ip http server

 

（2）RT1进行PPP配置（主认证方）

RT1(config)#interface serial 0/0

RT1(config-if)#encapsulation ppp

RT1(config-if)#ip address 192.168.13.1 255.255.255.252

RT1(config-if)#ppp authentication pap

RT1(config-if)#no shutdown

RT1(config)#username RT3 password tltl

  RT3 进行PPP配置（被认证方）

RT3(config)#interface s0/0

RT3(config-if)#encapsulation ppp

RT3(config-if)#ip address 192.168.13.2 255.255.255.252

RT3(config-if)#no shutdown

RT3(config-if)#ppp pap sent-username RT3 password tltl

RT3(config-if)#

*Mar  1 00:22:44.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

RT3(config-if)#do ping 192.168.13.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.13.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 32/45/64 ms

（3）RT1进行有数据库的PPP配置（双方证方）

RT1(config)#username RT3 password 333

RT1(config)#interface s0/0

RT1(config-if)#ip address 192.168.13.1 255.255.255.252

RT1(config-if)#encapsulation ppp

RT1(config-if)#ppp authentication pap

RT1(config-if)#ppp pap sent-username RT1 password 111

    RT3 进行有数据库的PPP配置（双方证方）

RT3(config)#username RT1 password 111

// 数据库中存放 RT1对应密码111的资料

RT3(config)#interface s0/0

RT3(config-if)#ip address 192.168.13.2 255.255.255.252

RT3(config-if)#encapsulation ppp

RT3(config-if)#ppp authentication pap

RT3(config-if)#ppp pap sent-username RT3 password 333

 

（4）RT1进行CHAP配置（被认证方）

R1(config)#interface s0/0

R1(config-if)#ip address 10.10.13.1 255.255.255.252

R1(config-if)#encapsulation ppp

R1(config-if)#ppp chap password 111

R1(config-if)#no shutdown

RT3 进行CHAP配置（主认证方）

R3(config)#username R1 password 111

R3(config)#interface S0/0

R3(config-if)#ip add 10.10.13.2 255.255.255.252

R3(config-if)#encapsulation ppp

R3(config-if)#ppp authentication chap

R3(config-if)#no shutdown

（5）RT1进行CHAP配置（双向认证）

R1(config)#username server password 333

R1(config)#interface s0/0

R1(config-if)#ip address 10.10.13.1 255.255.255.252

R1(config-if)#no shutdown

*Mar  1 00:01:59.259: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up

R1(config-if)#encapsulation ppp

R1(config-if)#ppp chap hostname client

R1(config-if)#do show ip int  brief      

Interface                  IP-Address      OK? Method Status                Protocol

Serial0/0                  10.10.13.1      YES manual up                    up     

Serial0/1                  unassigned      YES unset  administratively down down   

Serial0/2                  unassigned      YES unset  administratively down down   

Serial0/3                  unassigned      YES unset  administratively down down 

R1#ping 10.10.13.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.13.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 32/51/84 ms

RT3 进行CHAP配置（双向认证）

R3(config)#username client password 333

R3(config)#interface s0/0

R3(config-if)#ip address 10.10.13.2 255.255.255.252

R3(config-if)#encapsulation ppp

R3(config-if)#no shutdown

R3(config-if)#

*Mar  1 00:03:47.835: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up

R3(config-if)#

*Mar  1 00:03:48.963: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

R3(config-if)#ppp authentication chap

 

R3(config)#do show ip int brief

Interface                  IP-Address      OK? Method Status                Protocol

Serial0/0                  10.10.13.2      YES manual up                    up     

Serial0/1                  unassigned      YES unset  administratively down down   

Serial0/2                  unassigned      YES unset  administratively down down   

Serial0/3                  unassigned      YES unset  administratively down down

R3(config)#do ping 10.10.13.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.13.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 32/44/76 ms

（6）R1的PPP捆绑配置

R1(config)#interface MUltilink 1

*Mar  1 00:02:43.443: %LINEPROTO-5-UPDOWN: Line protocol on Interface Multilink1, changed state to down

R1(config-if)#ip address 10.10.13.1 255.255.255.252

R1(config-if)#ppp multilink group 1

R1(config-if)#exit

R1(config)#interface serial 0/0

R1(config-if)#no ip address

R1(config-if)#encapsulation ppp

R1(config-if)#ppp multilink group 1

R1(config-if)#exit

R1(config)#interface serial 0/1

R1(config-if)#no ip address

R1(config-if)#encapsulation ppp

R1(config-if)#ppp multilink group 1

R1#show ip int brief

Interface                  IP-Address      OK? Method Status                Protocol

Serial0/0                  unassigned      YES manual up                    up     

Serial0/1                  unassigned      YES manual up                    up     

Serial0/2                  unassigned      YES unset  administratively down down   

Serial0/3                  unassigned      YES unset  administratively down down   

Multilink1                 10.10.13.1      YES manual up                    up  

R1#ping 10.10.13.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.13.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 28/49/72 ms

R3 的PPP捆绑配置

R3(config)#interface MUltilink 1

*Mar  1 00:02:43.443: %LINEPROTO-5-UPDOWN: Line protocol on Interface Multilink1, changed state to down

R3(config-if)#ip address 10.10.13.1 255.255.255.252

R3(config-if)#ppp multilink group 1

R3(config-if)#exit

R3(config)#interface serial 0/0

R3(config-if)#no ip address

R3(config-if)#encapsulation ppp

R3(config-if)#ppp multilink group 1

R3(config-if)#exit

R3(config)#interface serial 0/1

R3(config-if)#no ip address

R3(config-if)#encapsulation ppp

R3(config-if)#ppp multilink group 1

    R3#show ip int brief

Interface                  IP-Address      OK? Method Status                Protocol

Serial0/0                  unassigned      YES manual up                    up     

Serial0/1                  unassigned      YES manual up                    up     

Serial0/2                  unassigned      YES unset  administratively down down   

Serial0/3                  unassigned      YES unset  administratively down down   

Multilink1                 10.10.13.2      YES manual up                    up

     R3#ping 10.10.13.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.13.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 24/51/96 ms

 

四、遇到的问题及思考

在完成PPP链路捆绑的时候，发现端口协议无法UP，询问后才知道，PPT上的示范并不能通，要将双方启用    CHAP的命令PPP authentication CHAP  no掉，no掉之后发现可以Ping通，之前不通的原因就在于都启用了CHAP认证，于是我又启用了CHAP认证，在双方都添加了一个数据库，实现双向认证，发现可行。

五、实验心得

这次实验涉及的PAP和CHAP协议虽然看起来比较容易，但是一旦深究起来，发现并不简单。理论上的东西，经过实验才发现了更多的问题。所以，理论和实验应该相结合，并且，在实验中，要求甚解，要想着去完成实验要求以外的内容，不怕做不到，只怕想不到。