《计算机网络》实验指导书：PPP封装CHAP验证配置.doc

海量资料 超值下载PPP封装CHAP验证配置一、实验目的1.掌握CHAP验证配置2.理解验证过程二、实验描述基于安全的考虑，需要路由器双方经过验证后才能建议连接三、实验拓扑四、所需设备1.R2801 1台2.串口线 1根五、实验步骤第1步：Router-A的配置Router(config)#host Router-A配置主机名Router-A(config)#username Router-B passwork jsj414设置帐号名密码Router-A(config)#int s1/1Router-A(config-if)#ip add 192.168.1.1 255.255.255.0Router-A(config-if)#clock rate 64000Router-A(config-if)#encapsulation PPP封装PPP协议Router-A(config-if)#ppp authentication chap设置验证方式CHAPRouter-A(config-if)#no sh第2步：Router-B的配置Router(config)#host Router-BRouter-B(config)#user Router-A password jsj414Router-B(config)#int s1/0Router-B(config-if)#ip add 192.168.1.2 255.255.255.0Router-B(config-if)#encapsulation pppRouter-B(config-if)#ppp authentication chapRouter-B(config-if)#no sh第3步：查看配置Router-A#sh interface serial 1/1查看路由器A的接口状态Serial1/1 is up, line protocol is up (connected) Hardware is HD64570 Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP封装PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input never, output never, output hang never Last clearing of show interface counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=upRouter-B#sh interfaces serial 1/0查看路由器B的接口配置信息Serial1/0 is up, line protocol is up (connected) Hardware is HD64570 Internet address is 192.168.1.2/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input never, output never, output hang never Last clearing of show interface counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 2 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up第4步：测试连通性Router-A#ping 192.168.1.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 31/65/203 ms六、注意事项1.双方密码一定要一致，发送的帐号要和对方数据库中的帐号对应2.不要忘记配置DCE的时钟频率七、参考配置Router-A#sh runBuilding configuration.Current configuration : 665 bytes!version 12.4no service password-encryption!hostname Router-A!username Router-B password 0 jsj414!ip ssh version 1!interface FastEthernet0/0 no ip address duplex auto speed auto shutdown!interface FastEthernet0/1 no ip address duplex auto speed auto shutdown!interface Serial1/0 no ip address shutdown!interface Serial1/1 ip address 192.168.1.1 255.255.255.0 encapsulation ppp ppp authentication chap clock rate 64000!interface Serial1/2 no ip address shutdown!interface Serial1/3 no ip address shutdown!interface Vlan1 no ip address shutdown!ip classless!line con 0line vty 0 4 login!EndRouter-B#sh runBuilding configuration.Current configuration : 835 bytes!version 12.4no service password-encryption!hostname Router-B!username Router-A password 0 jsj414!ip ssh version 1!interface FastEthernet0/0 no ip address duplex auto speed auto shutdown!interface FastEthernet0/1 no ip address duplex auto speed auto shutdown!interface Serial1/0 ip address 192.168.1.2 255.255.255.0 encapsulation ppp ppp authentication chap!interface Serial1/1 no ip address shutdown!interface Serial1/2 no ip address shutdown!interface Serial1/3 no ip address shutdown!interface Serial1/4 no