一、实验拓扑
二、实验需求
1、R1和R2使用PPP链路直连,R2和R3把2条PPP链路捆绑为PPP MP直连
2、按照图示配置工IP地址
3、R2对R1的PPP进行单向chap验证
4、R2和R3的PPP进行双向chap验证
三、实验过程
1、配置PPP MP组
[r2]int Mp-group 0/0/0
[r2]int s3/0/1
[r2-Serial3/0/1]ppp mp Mp-group 0/0/0
Jul 21 2024 19:22:06-08:00 r2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol PPP
on the interface Serial3/0/1 has entered the DOWN state.
[r2-Serial3/0/1]
[r2-Serial3/0/1]
Jul 21 2024 19:22:09-08:00 r2 %%01IFNET/4/LINK_STATE(l)[2]:The line protocol PPP
on the interface Serial3/0/1 has entered the UP state.
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp mp Mp-group 0/0/0
Jul 21 2024 19:22:34-08:00 r2 %%01IFNET/4/LINK_STATE(l)[3]:The line protocol PPP
on the interface Serial4/0/0 has entered the DOWN state.
[r2-Serial4/0/0]
[r2-Serial4/0/0]
Jul 21 2024 19:22:40-08:00 r2 %%01IFNET/4/LINK_STATE(l)[4]:The line protocol PPP
on the interface Serial4/0/0 has entered the UP state.
[r3]int Mp-group 0/0/0
[r3]int s3/0/0
[r3-Serial3/0/0]ppp mp Mp-group 0/0/0
Jul 21 2024 19:23:21-08:00 r3 %%01IFNET/4/LINK_STATE(l)[4]:The line protocol PPP
on the interface Serial3/0/0 has entered the DOWN state.
[r3-Serial3/0/0]
[r3-Serial3/0/0]
Jul 21 2024 19:23:24-08:00 r3 %%01IFNET/4/LINK_STATE(l)[5]:The line protocol PPP
on the interface Serial3/0/0 has entered the UP state.
[r3-Serial3/0/0]
Jul 21 2024 19:23:24-08:00 r3 %%01IFNET/4/LINK_STATE(l)[6]:The line protocol PPP
on the interface Mp-group0/0/0 has entered the UP state.
[r3-Serial3/0/0]int s3/0/1
[r3-Serial3/0/1]ppp mp Mp-group 0/0/0
[r3-Serial3/0/1]
Jul 21 2024 19:23:48-08:00 r3 %%01IFNET/4/LINK_STATE(l)[7]:The line protocol PPP
on the interface Serial3/0/1 has entered the DOWN state.
[r3-Serial3/0/1]
Jul 21 2024 19:23:54-08:00 r3 %%01IFNET/4/LINK_STATE(l)[8]:The line protocol PPP
on the interface Serial3/0/1 has entered the UP state.
2、配置IP地址
[r1]int Serial 3/0/0
[r1-Serial3/0/0]ip address 192.168.1.1 24
[r2]int s3/0/0
[r2-Serial3/0/0]ip add 192.168.1.2 24
[r2]int Mp-group 0/0/0
[r2-Mp-group0/0/0]ip add 192.168.2.2 24
[r3]int Mp-group 0/0/0
[r3-Mp-group0/0/0]ip add 192.168.2.3 24
3、配置PPP CHAP
R2对R1验证
主R2:
[r2]aaa
[r2-aaa]local-user wangdaye password cipher wdy12345
Info: Add a new user.
[r2-aaa]local-user wangdaye service-type ppp
[r2-aaa]q
[r2]int s3/0/0
[r2-Serial3/0/0]ppp authentication-mode chap
被R1:
[r1]int s3/0/0
[r1-Serial3/0/0]ppp chap user wangdaye
[r1-Serial3/0/0]ppp chap password cipher wdy12345
[r1-Serial3/0/0]shutdown
[r1-Serial3/0/0]undo shutdown
验证:
R2和R3的双向认证
R2为主
[r2]aaa
[r2-aaa]local-user zhangdaye password cipher zdy12345
Info: Add a new user.
[r2-aaa]local-user zhangdaye service-type ppp
[r2-aaa]q
[r2]int s3/0/1
[r2-Serial3/0/1]ppp authentication-mode chap
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp authentication-mode chap
[r3]int s3/0/0
[r3-Serial3/0/0]ppp chap user zhangdaye
[r3-Serial3/0/0]ppp chap password cipher zdy12345
[r3]int s3/0/1
[r3-Serial3/0/1]ppp chap user zhangdaye
[r3-Serial3/0/1]ppp chap password cipher zdy12345
R3为主
[r3]aaa
[r3-aaa]local-user liudaye password cipher ldy12345
Info: Add a new user.
[r3-aaa]local-user liudaye service-type ppp
[r3-aaa]q
[r3]int s3/0/0
[r3-Serial3/0/0]ppp authentication-mode chap
[r3-Serial3/0/0]q
[r3]int s3/0/1
[r3-Serial3/0/1]ppp authentication-mode chap
[r2]int s3/0/1
[r2-Serial3/0/1]ppp chap user liudaye
[r2-Serial3/0/1]ppp chap password cipher ldy12345
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp chap user liudaye
[r2-Serial4/0/0]ppp chap password cipher ldy12345
[r2-Serial3/0/1]shutdown
[r2-Serial4/0/0]shutdown
[r2-Serial4/0/0]undo shutdown
[r2-Serial3/0/1]undo shutdown
验证