目录
实验要求:
需求分析:
1.R1和R2使用PPP链路直连,R2和R3两条PPP链路为PPP MP直连。
2.创建MP-group接口,加入MP-group组,在逻辑接口配置IP地址。
3.配置R1,R2接口IP。
4.R2对R1的PPP进行单向的CHAP验证。
5.R2和R3的PPP进行双向的CHAP验证,配置四次。
6.如果配置的PPP mp链路需要做PPP的认证,则主验证方和被验证方的接口验证配置,应该再正是的物理接口下进行配置。
实验配置:
1.R2和R3,配置PPP mp
[AR2]interface Mp-group0/0/0
[AR2]int s3/0/1
[AR2-Serial3/0/1]ppp mp Mp-group0/0/0
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp mp Mp-group0/0/0
[AR2]interface Mp-group0/0/0
[AR2]int s3/0/1
[AR2-Serial3/0/1]ppp mp Mp-group0/0/0
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp mp Mp-group0/0/0
2.配置IP地址,测试R1,R2是否联通
[AR1]int s3/0/0
[AR1-Serial3/0/0]ip address 192.168.1.1 24
[AR2]int s3/0/0
[AR2-Serial3/0/0]ip address 192.168.1.2 24
[AR2]interface Mp-group0/0/0
[AR2-Mp-group0/0/0]ip address 192.168.2.2 24
[AR3]interface Mp-group0/0/0
[AR3-Mp-group0/0/0]ip address 192.168.2.3 24
3.R2对R1的PPP进行单向的CHAP验证
在R2的Serrial3/0/0接口上设置验证类型(主验证方:配置用户列表及验证方式)
[AR2]aaa
[AR2-aaa]local-user zz password cipher 123
Info: Add a new user.
[AR2-aaa]local-user zz service-type ppp
[AR2-aaa]int s3/0/0
[AR2-Serial3/0/0]ppp authentication-mode chap # 设置验证类型
在R1的Serial3/0/0接口上配置用于验证的用户名和密码
[AR1]int s3/0/0
[AR1-Serial3/0/0]ppp chap user zll
[AR1-Serial3/0/0]ppp chap password cipher 1214
4.R2,R3的PPP进行双向CHAP验证
R2先作为主认证方
[AR2]aaa
[AR2-aaa]local-user zz password cipher 123
[AR2-aaa]local-user zz service-type ppp
[AR2-aaa]int s3/0/1
[AR2-Serial3/0/1]ppp authentication-mode chap
[AR2-Serial3/0/1]link-protocol ppp
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp authentication-mode chap
[AR2-Serial4/0/0]link-protocol ppp
R3作为被认证方
[AR3]int s3/0/0
[AR3-Serial3/0/0]ppp chap user zz
[AR3-Serial3/0/0]ppp chap password cipher 123
[AR3-Serial3/0/0]int s3/0/1
[AR3-Serial3/0/1]ppp chap user zz
[AR3-Serial3/0/1]ppp chap password cipher 123
R3作为认证方
[AR3]aaa
[AR3-aaa]local-user zz password cipher 123
[AR3-aaa]local-user zz service-type ppp
[AR3-aaa]int s3/0/0
[AR3-Serial3/0/0]ppp authentication-mode chap
[AR3-Serial3/0/0]link-protocol ppp
[AR3-Serial3/0/0]int s3/0/1
[AR3-Serial3/0/1]ppp authentication-mode chap
[AR3-Serial3/0/1]link-protocol ppp
R2作为被认证方
[AR2]int s3/0/1
[AR2-Serial3/0/1]ppp chap user zz
[AR2-Serial3/0/1]ppp chap password cipher 123
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp chap user zz
[AR2-Serial4/0/0]ppp chap password cipher 123
接口处shutdown后undo shutdown,看是否有两次开启信息,若有,即配置成功