一,实验拓扑:
目录
二,实验要求:
1.R1和R2使用PPP链路直连,
2.R2和R3把2条PPP链路捆绑为PPP MP直连按照图示配置IP地址
3.R2对R1的PPP进行单向chap验证
4.R2和R3的PPP进行双向chap验证
三,实验思路:
用串线将设备互联,使接口协议为ppp协议,AR1与AR2之前的接口可直接配置IP地址,AR2与AR3之间要先创建逻辑Mp-group 接口,只能在此接口上配置IP地址,不能在实际接口配置IP地址,但是做双向的chap验证时,要在实际的接口上面做。
四,实验过程:
AR1(配置命令信息):
[r1]inter Serial 3/0/0
[r1-Serial3/0/0]ip address 192.168.1.1 24
[r1-Serial3/0/0]ppp chap user wangdaye //作为被验证方
[r1-Serial3/0/0]ppp chap password cipher wangdaye12345
AR2(配置命令信息):
//对AR1作为主验证方
[r2]inter Serial3/0/1
[r2-Serial3/0/1]ip address 192.168.1.2 24
[r2-Serial3/0/1]q
[r2]aaa
[r2-aaa]local-user wangdaye password cipher wangdaye12345
[r2-aaa]local-user wangdaye service-type ppp
[r2-aaa]q
[r2]inter Serial 3/0/1
[r2-Serial3/0/1]ppp authentication-mode chap
//与AR3实现双方chap验证
[r2]inter Mp-group 0/0/0(创建Mp-group)
[r2-Mp-group0/0/0]ip address 192.168.2.2 24
[r2]inter Serial 4/0/0
[r2-Serial4/0/0]ppp mp Mp-group 0/0/0(加入Mp-group)
[r2-Serial4/0/0]q
[r2]inter Serial 3/0/0
[r2-Serial3/0/0]ppp mp Mp-group 0/0/0
(作为主验证方的配置,由于前面已经在aaa里创建用户,以及认证,只需要在接口处创建ppp的认证模式即可)
[r2]inter Serial 4/0/0
[r2-Serial4/0/0]ppp authentication-mode chap
[r2-Serial4/0/0]q
[r2]inter Serial 3/0/0
[r2-Serial3/0/0]ppp authentication-mode chap
(作为被验证方的配置)
[r2]inter Serial 4/0/0
[r2-Serial4/0/0]ppp chap user wangdaye
[r2-Serial4/0/0]ppp chap password cipher wangdaye12345
[r2-Serial4/0/0]q
[r2]inter Serial 3/0/0
[r2-Serial3/0/0]ppp chap user wangdaye
[r2-Serial3/0/0]ppp chap password cipher wangdaye12345
AR3(配置命令信息):
//与AR3实现双方chap验证
[r3]inter Mp-group 0/0/0(创建Mp-group)
[r3-Mp-group0/0/0]ip address 192.168.2.3 24
[r3]inter Serial 4/0/0
[r3-Serial4/0/0]ppp mp Mp-group 0/0/0(加入Mp-group)
[r3-Serial4/0/0]q
[r3]inter Serial 3/0/0
[r3-Serial3/0/0]ppp mp Mp-group 0/0/0
(作为被验证方的配置)
[r3]inter Serial 4/0/0
[r3-Serial4/0/0]ppp chap user wangdaye
[r3-Serial4/0/0]ppp chap password cipher wangdaye12345
[r3-Serial4/0/0]q
[r3]inter Serial 3/0/0
[r3-Serial3/0/0]ppp chap user wangdaye
[r3-Serial3/0/0]ppp chap password cipher wangdaye12345
(作为主验证方的配置)
[r3]aaa
[r3-aaa]local-user wangdaye password cipher wangdaye12345
[r3-aaa]local-user wangdaye service-type ppp
[r3-aaa]q
[r3]inter Serial 4/0/0
[r3-Serial4/0/0]ppp authentication-mode chap
[r3-Serial4/0/0]q
[r3]inter Serial 3/0/0
[r3-Serial3/0/0]ppp authentication-mode chap