1,实验拓扑
2,实验目的
1,R1和R2使用PPP链路直连,R2和R3把2条PPP链路捆绑为PPP MP直连
2,按照图示配置IP地址
3,R2对R1的PPP进行单向chap验证
4,R2和R3的PPP进行双向chap验证
3,实验过程
1,R1和R2使用PPP链路直连
R1:
<Huawei>sys
[Huawei]sysname R1
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
R2:
[Huawei]sysname R2
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ip add 192.168.1.2 24
2,R2和R3把2条PPP链路捆绑为PPP MP直连
R2:
[R2]interface Mp-group 0/0/0
[R2-Mp-group0/0/0]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2]interface Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
[R2]display ip interface brief
R3:
[Huawei]sysname R3
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]q
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
[R3-Serial3/0/0]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24
[R3]display ip interface brief
[R2]ping 192.168.2.3
PING 192.168.2.3: 56 data bytes, press CTRL_C to break
0.00% packet loss
3,R2 对 R1 的 PPP 进行单向 chap 验证
分析:R2 对 R1 进行单向验证,表示 R2 是主验证方,R1 是被验证方。所以需要在 R2 上创建用于验证的用户(用户名:jo;密码:1234567)
主验证方配置:
[R2]aaa
[R2-aaa]local-user jo password cipher 1234567
[R2-aaa]local-user jo service-type ppp
[R2-aaa]q
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp authentication-mode chap
被验证方配置:
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ppp chap user jo
[R1-Serial3/0/0]ppp chap password cipher 1234567
4,R2对R3的PPP进行双向chap验证
R2为主验证方,R3为被验证方
[R2]aaa
[R2-aaa]local-user j password cipher 1234567
[R2-aaa]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap
[R2-Serial3/0/1]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap user j
[R3-Serial3/0/0]ppp chap password cipher 1234567
[R3-Serial3/0/0]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp chap user j
[R3-Serial3/0/1]ppp chap password cipher 1234567
R3为主验证方,R2为被验证方
[R3]aaa
[R3-aaa]local-user jyh password cipher 1234567
[R3-aaa]q
[R3]int s 3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap
[R3-Serial3/0/0]q
[R3]int s 3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
[R2]int s 3/0/1
[R2-Serial3/0/1]ppp chap user jyh
[R2-Serial3/0/1]ppp chap password cipher 1234567
[R2-Serial3/0/1]q
[R2]int s 4/0/0
[R2-Serial4/0/0]ppp chap user jyh
[R2-Serial4/0/0]ppp chap password cipher 1234567