HCIP第二次实验（PPP）

• 实验括扑图

• 实验要求

1. R1和R2使用PPP链路直连，R2和R3把2条PPP链路捆绑为PPP  MP直连
2. 按照图示配置IP地址
3. R2对R1的PPP进行单向chap验证
4. R2和R3的PPP进行双向chap验证

• 实验思路

1、配置IP，R2,R3链路捆绑后配置IP

2、R1-R2chap认证在R2和R1上面配置PPP的chap验证R2为主认证方R1为被认证方。实现R2对R1的单向chap认证

3、R2-R3chap认证，让R2和R3互为主认证方和被认证方，实现R2和R3的双向chap认证

4、在R2和R3上配置PPP MP进行链路捆绑。

四、实验步骤

1、配置R1与R2的IP

R1：

[R1]int s 3/0/0

[R1-Serial3/0/0]ip add 192.168.1.1 24

R2：

[R2]int s3/0/0

[R2-Serial3/0/0]ip add 192.168.1.2 24

1. R2,R3配置PPP MP

[R2]int Mp-group 0/0/0

[R2-Mp-group0/0/0]int s3/0/1

[R2-Serial3/0/1]ppp mp mp

[R2-Serial3/0/1]ppp mp Mp-group 0/0/0

[R2-Serial3/0/1]int s4/0/0

[R2-Serial4/0/0]ppp mp Mp-group 0/0/0

[R3]int Mp-group 0/0/0

[R3-Mp-group0/0/0]int s3/0/0

[R3-Serial3/0/0]ppp mp Mp-group 0/0/0

[R3-Serial3/0/0]int s3/0/1

[R3-Serial3/0/1]ppp mp Mp-group 0/0/0

3、配置R2,R3之间的IP

[R2]int Mp-group 0/0/0

[R2-Mp-group0/0/0]ip add 192.168.2.2 24

[R3]int Mp-group 0/0/0

[R3-Mp-group0/0/0]ip add 192.168.2.3 24

4、R2对R1的PPP进行单向chap验证

 在R2上面的s3/0/0口设置验证类型

[R2]aaa

[R2-aaa]local-user wzh password cipher 123

Info: Add a new user.

[R2-aaa]local-user wzh service-type ppp

[R2-aaa]int s3/0/0

[R2-Serial3/0/0]ppp authentication-mode chap

在R1的s3/0/0口上配置用于验证的用户和密码

[R1]int s3/0/0

[R1-Serial3/0/0]ppp chap user wzh

[R1-Serial3/0/0]ppp chap password cipher 123

1. R2,R3的PPP进行双向chap验证

R2是主认证方

[R2]aaa

[R2-aaa]local-user wzh password cipher 123

[R2-aaa]local-user wzh service-type ppp

[R2-aaa]int s3/0/1

[R2-Serial3/0/1]ppp authentication-mode chap

[R2-Serial3/0/1]int s4/0/0

[R2-Serial4/0/0]ppp authentication-mode chap

[R3]int s3/0/0

[R3-Serial3/0/0]ppp chap user wzh

[R3-Serial3/0/0]ppp chap password cipher 123

R3作为主认证方

[R3]aaa

[R3-aaa]local-user wzh password cipher 123

Info: Add a new user.

[R3-aaa]local-user wzh service-type ppp

[R3-aaa]int s3/0/0

[R3-Serial3/0/0]ppp authentication-mode chap

[R3-Serial3/0/0]int s3/0/1

[R3-Serial3/0/1]ppp authentication-mode chap

[R2]int s3/0/1

[R2-Serial3/0/1]ppp chap user wzh

[R2-Serial3/0/1]ppp chap password cipher 123

[R2-Serial3/0/1]int s4/0/0

[R2-Serial4/0/0]ppp chap user wzh

[R2-Serial4/0/0]ppp chap password cipher 123

6、验证是否成功：

接口处shutdown后undo shutdown，看是否有两次开启信息，若有，即配置