PPP协议配置

实验目的 

1、R1 和 R2 使用 ppp 链路直连，R2 和 R3 把 2 条 ppp 链路捆绑为 ppp MP 直连
2、按照图示配置 Ip 地址
3、R2 对 R1 的 ppp 进行单向 chap 验证
4、R2 和R3的PPP 进行双向 chap 验证
 

实验思路

R1-R2chap认证在R2和R1上面配置PPP的chap验证R2为主认证方R1为被认证方。实现R2对R1的单向chap认证

2、R2-R3chap认证，让R2和R3互为主认证方和被认证方，实现R2和R3的双向chap认证

3、在R2和R3上配置PPP MP进行链路捆绑
 

实验步骤

1、配置IP地址

[R1]int serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24

[R2]int serial 3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24

2.R2和R3把2条PPP链路捆绑为PPP MP直连

1.创建一个聚合口

[R2]int serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
[R2-Serial3/0/1]quit
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2-Serial3/0/1]q

[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
[R3-Serial 3/0/0]quit
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0

2.给逻辑口配置IP地址

[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
[R2-Mp-group0/0/0]q

[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24
[R3-Mp-group0/0/0]q

3.创建一个用户

[R2]aaa

[R2-aaa]local-user li password cipher 123456

Info:Add a new user.

[R2-aaa]local-user li service-type ppp

4.进入3/0/0接口

[R2]int serial 3/0/0

[R2-serial3/0/0]ppp authentication-mode chap

R1:

[R1]int serial 3/0/0

[R1-serial3/0/0]ppp chap password cipher 123456

3、R2和R3的PPP进行双向chap验证

R2为主验证方，R3为被验证方

[R2]aaa
[R2-aaa]local-user li password cipher 123456
Info: Add a new user.  
[R2-aaa]local-user li service-type ppp
[R2-aaa]q
[R2]
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]q
[R2]int se    
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]q
[R2]

b.被验证方的验证

[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap user li 
[R3-Serial3/0/0]ppp chap password cipher 123456
[R3-Serial3/0/0]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp chap user li
[R3-Serial3/0/1]ppp chap password cipher 123456
[R3-Serial3/0/1]q

R2为被验证方，R2为主验证方

[R3]aaa
[R3-aaa]local-user li password cipher 123456
Info: Add a new user.  
[R3-aaa]local-user li service-type ppp
[R3-aaa]q
[R3]
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]q
[R3]int se    
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]q
[R3]

b.被验证方的验证

[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp chap user li
[R2-Serial3/0/1]ppp chap password cipher 123456
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp chap user li
[R2-Serial4/0/0]ppp chap password cipher 123456
[R2-Serial4/0/0]q

[R2]ping192.168.2.3

相互能ping通，则完成相互chap验证