GNS3模拟PPP封装CHAP验证配置.doc

PPP封装CHAP验证配置一、实验目的1.掌握CHAP验证配置2.理解验证过程二、实验描述基于安全的考虑，需要路由器双方验证通过后才能建立连接三、实验拓扑实验步骤第1步：接口地址配置R1: S1/0: 192.168.1.1 255.255.255.0R2: S1/0:192.168.1.2 255.255.255.0第2步：R1的配置R1#config tR1(config)#int s1/1R1(config-if)#ip address 192.168.1.1 255.255.255.0R1(config-if)#no shutR1(config-if)#exitR1(config)#username R2 pass 123 设置账号和密码R1(config)#int s1/1R1(config-if)#encapsulation ppp 封装PPPR1(config-if)#ppp authentication chap 选择认证方式R1(config-if)#ppp pap sent-username R1 password 123 设置发送给对方的账号和密码R1(config-if)#clock rate 9600R1(config-if)#exit第3步：查看接口配置R1#show interface serial 1/1Serial1/0 is up, line protocol is down (disabled) 对端没有设置PPP 所以不可用 Hardware is HD64570 Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Closed Closed: LEXCP, BRIDGECP, IPCP, CCP, CDPCP, LLC2, BACP Last input never, output never, output hang never第4步：R2的配置R2的配置R2(config)#user R1 password 123R2(config)#int s1/0R2(config-if)#ip add 192.168.1.2 255.255.255.0R2(config-if)#clock rate 9600R2(config-if)#encapsulation pppR2(config-if)#ppp authentication chapR2(config-if)#no sh第5步：查看接口配置R2#show interface serial1/0Serial1/0 is up, line protocol is up (connected) Hardware is HD64570 Internet address is 192.168.1.2/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input never, output never, output hang never Last clearing of show interface counters never省略第6步：测试连通性R2#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip