网络系统集成课程设计(-PPP的PAP和CHAP认证)

信息学院 网络系统集成课程实践 实验报告 实验名称 PPP 的 PAP 和 CHAP 认证 实验日期 2015 年 04 月 15 日 1 实验目的 实验目的 掌握 PPP PAP 认证和 PPP CHAP 认证的过程及配置 2 实验内容实验内容 1 在路由器上配置 PPP PAP 认证 2 在路由器上配置 PPP CHAP 认证 3 实验要求实验要求 1 写出在路由器上配置 PPP PAP 认证的过程 2 写出在路由器上配置 PPP CHAP 认证的过程 4 实验设备实验设备 1 路由器 Router 2811 两台 2 DCE 串口线 5 实验步骤实验步骤 一 一 PPP PAP 认证认证 本实验要求配置路由器 R1 和路由器 R2 双向 PAP 验证 实验网络拓补结构设计 1 配置路由器 R1 姓名 班级 学号 年级 12 级 指导教师 成绩 R1 enable R1 conf t Enter configuration commands one per line End with CNTL Z R1 config username R2 password cisco 以对方的主机名作为用户名 密码和对方路由器一致 在验证方配置被验证方用户名密码 R1 config int loop0 R1 config if ip address 1 1 1 1 255 255 255 0 R1 config if int s 0 3 0 R1 config if ip address 192 168 1 1 255 255 255 0 R1 config if encapsulation ppp 接口下封装数据链路层 PPP 协议 R1 config if ppp authentication pap PPP 启用 PAP 认证方式 R1 config if ppp pap sent username R1 password cisco PAP 认证的用户名 密码 R1 config if no shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to up R1 config if exit R1 config exit R1 SYS 5 CONFIG I Configured from console by console 2 配置路由器 R2 Router enable Router conf t Enter configuration commands one per line End with CNTL Z Router config hostname R2 R2 config username R1 password cisco 以对方的主机名作为用户名 密码和对方路由器一致 在验证方配置被验证方用户名密码 R2 config int loop0 R2 config if LINK 5 CHANGED Interface Loopback0 changed state to up LINEPROTO 5 UPDOWN Line protocol on Interface Loopback0 changed state to up R2 config if ip address 2 2 2 2 255 255 255 0 R2 config if int s 0 3 0 R2 config if ip address 192 168 1 1 255 255 255 0 R2 config if encapsulation ppp 接口下封装数据链路层 PPP 协议 R2 config if ppp authentication pap PPP 启用 PAP 认证方式 R2 config if ppp pap sent username R2 password cisco PAP 认证的用户名 密码 R2 config if no shutdown R2 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up R2 config if LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to up R2 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to down LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to down LINK 5 CHANGED Interface Serial0 3 0 changed state to up LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to up 3 配置完成 Router1 和 Router2 后 在 Router1 上进行测试 R1 debug ppp authentication 打开 PPP 认证调试 PPP authentication debugging is on R1 conf t Enter configuration commands one per line End with CNTL Z R1 config int s 0 3 0 R1 config if shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to administratively down LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to down R1 config if no shutdown 端口关闭之后再打开 就可以看到 PAP 认证的重新建立过程 R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up Serial0 3 0 Using hostname from interface PAP Serial0 3 0 Using password from interface PAP Serial0 3 0 PAP O AUTH REQ id 17 len 15 Serial0 3 0 PAP Phase is FORWARDING Attempting Forward Serial0 3 0 PAP I AUTH REQ id 17 len 15 Serial0 3 0 PAP Authenticating peer Serial0 3 0 PAP Phase is FORWARDING Attempting Forward Serial0 3 0 Using hostname from interface PAP Serial0 3 0 Using password from interface PAP Serial0 3 0 PAP O AUTH REQ id 17 len 15 Serial0 3 0 PAP Phase is FORWARDING Attempting Forward LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to up 4 查看网络拓补图 从图上可以看出 路由器之间已经联通 5 当 R1 和 R2 密码不一致时 再次进行测试 R1 config int s 0 3 0 R1 config if no ppp pap sent username R1 password cisco 修改路由器 R1 上的密码 是路由器 R1 和 R2 的密码不一致 可以看到 认证将失败 R1 debug ppp authentication PPP authentication debugging is on R1 conf t Enter configuration commands one per line End with CNTL Z R1 config int s 0 3 0 R1 config if shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to administratively down LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to down R1 config if no shutdown 当发出no shutdown 命令时 出现了死循环 用 Ctrl c 强制退出并用 end 结束 6 检查网络拓补图 由此可以看出 当两个路由器密码不一样时 两路由器无法联通 2 2 PPPPPP CHAPCHAP 认证认证 网络实验拓补结构 1 配置路由器 R1 Router enable Router conf t Enter configuration commands one per line End with CNTL Z Router config hostname R1 R1 config username R2 password cisco R1 config int loop0 R1 config if LINK 5 CHANGED Interface Loopback0 changed state to up LINEPROTO 5 UPDOWN Line protocol on Interface Loopback0 changed state to up R1 config if ip address 1 1 1 1 255 255 255 0 R1 config if int s 0 3 0 R1 config if ip address 192 168 1 1 255 255 255 0 R1 config if encapsulation ppp R1 config if ppp authentication chap R1 config if ppp pap sent username R1 password cisco R1 config if no shutdown LINK 5 CHANGED Interface Serial0 3 0 changed state to down Router config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up 2 配置路由器 R2 Router enable Router conf t Enter configuration commands one per line End with CNTL Z Router config hostname R2 R2 config username R1 password cisco R2 config int loop0 R2 config if LINK 5 CHANGED Interface Loopback0 changed state to up LINEPROTO 5 UPDOWN Line protocol on Interface Loopback0 changed state to up R2 config if ip address 2 2 2 2 255 255 255 0 R2 config if int s 0 3 3 Invalid interface type and number R2 config int s 0 3 0 R2 config if int s 0 3 0 R2 config if ip address 192 168 1 1 255 255 255 0 R2 config if encapsulation ppp R2 config if ppp authentication chap R2 config if ppp pap sent username R2 password cisco R2 config if no shutdown R2 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up 3 在 R1 上进行测试 R1 debug ppp authentication PPP authentication debugging is on R1 conf t Enter configuration commands one per line End with CNTL Z R1 config int s 0 3 0 R1 config if shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to administratively down LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to down R1 config if no shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 changed state to up Serial0 3 0 IPCP O CONFREQ Closed id 1 len 10 Serial0 3 0 IPCP I CONFACK Closed id 1 len 10 Serial0 3 0 IPCP O CONFREQ Closed id 1 len 10 Serial0 3 0 IPCP I CONFACK REQsent id 1 len 10 Serial0 3 0 IPCP I CONFREQ Closed id 1 len 10 Serial0 3 0 IPCP O CONFACK Closed id 1 len 10 Serial0 3 0 IPCP I CONFREQ REQsent id 1 len 10 Serial0 3 0 IPCP O CONFACK REQsent id 1 len 10 Serial0 3 0 IPCP O CONFREQ Closed id 1 len 10 Serial0 3 0 IPCP I CONFACK Closed id 1 len 10 Serial0 3 0 IPCP O CONFREQ Closed id 1 len 10 Serial0 3 0 IPCP I CONFACK REQsent id 1 len 10 LINEPROTO 5 UPDOWN Line protocol on Interface Serial0 3 0 changed state to up 4 显示网络拓补图 发现路由器配置并连接成功 5 修改 R1 上的密码 再次进行测试 R1 config if exit R1 config int s 0 3 0 R1 config if no ppp pap sent username R1 password cisco R1 config if R1 config if exit R1 config exit R1 SYS 5 CONFIG I Configured from console by console R1 debug ppp authentication PPP authentication debugging is on R1 conf t Enter configuration commands one per line End with CNTL Z R1 config int s 0 3 0 R1 config if shutdown R1 config if LINK 5 CHANGED Interface Serial0 3 0 change