海量资料
超值下载
PPP封装CHAP验证配置
一、实验目的
1.掌握CHAP验证配置
2.理解验证过程
二、实验描述
基于安全的考虑,需要路由器双方经过验证后才能建议连接
三、实验拓扑
四、所需设备
1.R2801 1台
2.串口线 1根
五、实验步骤
第1步:Router-A的配置
Router(config)#host Router-A配置主机名
Router-A(config)#username Router-B passwork jsj414设置帐号名密码
Router-A(config)#int s1/1
Router-A(config-if)#ip add 192.168.1.1 255.255.255.0
Router-A(config-if)#clock rate 64000
Router-A(config-if)#encapsulation PPP封装PPP协议
Router-A(config-if)#ppp authentication chap设置验证方式CHAP
Router-A(config-if)#no sh
第2步:Router-B的配置
Router(config)#host Router-B
Router-B(config)#user Router-A password jsj414
Router-B(config)#int s1/0
Router-B(config-if)#ip add 192.168.1.2 255.255.255.0
Router-B(config-if)#encapsulation ppp
Router-B(config-if)#ppp authentication chap
Router-B(config-if)#no sh
第3步:查看配置
Router-A#sh interface serial 1/1查看路由器A的接口状态
Serial1/1 is up, line protocol is up (connected)
Hardware is HD64570
Internet address is 192.168.1.1/24
MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation PPP封装PPP
, loopback not set, keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
Router-B#sh interfaces serial 1/0查看路由器B的接口配置信息
Serial1/0 is up, line protocol is up (connected)
Hardware is HD64570
Internet address is 192.168.1.2/24
MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
第4步:测试连通性
Router-A#ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 31/65/203 ms
六、注意事项
1.双方密码一定要一致,发送的帐号要和对方数据库中的帐号对应
2.不要忘记配置DCE的时钟频率
七、参考配置
Router-A#sh run
Building configuration...
Current configuration : 665 bytes
!
version 12.4
no service password-encryption
!
hostname Router-A
!
!
!
!
!
username Router-B password 0 jsj414
!
ip ssh version 1
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial1/0
no ip address
shutdown
!
interface Serial1/1
ip address 192.168.1.1 255.255.255.0
encapsulation ppp
ppp authentication chap
clock rate 64000
!
interface Serial1/2
no ip address
shutdown
!
interface Serial1/3
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip classless
!
!
!
!
!
line con 0
line vty 0 4
login
!
!
End
Router-B#sh run
Building configuration...
Current configuration : 835 bytes
!
version 12.4
no service password-encryption
!
hostname Router-B
!
!
!
!
!
username Router-A password 0 jsj414
!
ip ssh version 1
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial1/0
ip address 192.168.1.2 255.255.255.0
encapsulation ppp
ppp authentication chap
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
no ip address
shutdown
!
interface Serial1/3
no ip address
shutdown
!
interface Serial1/4
no ip address
shutdown
!
interface Serial1/5
no ip address
shutdown
!
interface Serial1/6
no ip address
shutdown
!
interface Serial1/7
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip classless
!
!
!
!
!
line con 0
line vty 0 4
login
!
!
End
6
展开阅读全文