PPP双向认证+子接口配置实例.doc

PPP封装PAP双向验证配置一、实验目的1.掌握PAP验证配置2.理解验证过程二、实验描述基于安全的考虑，需要路由器双方验证通过后才能建立连接三、实验拓扑四、实验步骤第1步：接口地址配置参照前面的讲解Router-A: S1/1: 192.168.1.1Router-B: S1/0:192.168.1.2第2步：Router-A的配置Router-AenRouter-A#config tRouter-A(config)#int s1/1Router-A(config-if)#ip address 192.168.1.1 255.255.255.0Router-A(config-if)#no shutRouter-A(config-if)#exitRouter-A(config)#username Router-B pass wuhu /存储用户名和密码Router-A(config)#int s1/1Router-A(config-if)#encapsulation ppp /存储用户名和密码Router-A(config-if)#ppp authentication pap /选择认证式Router-A(config-if)#ppp pap sent-username Router-A password wuhu /发送用户名和密码Router-A(config-if)#clock rate 64000Router-A(config-if)#exit第3步：查看接口配置Router-A#show interface serial 1/1Serial1/1 is up, line protocol is down (disabled) Hardware is HD64570 Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Closed Closed: LEXCP, BRIDGECP, IPCP, CCP, CDPCP, LLC2, BACP Last input never, output never, output hang never第4步：Route-B的配置Router-BenRouter-B#config tRouter-B(config)#username Router-A password wuhu /存储用户名和密码Router-B(config)#int s1/0Router-B(config-if)#ip address 192.168.1.2 255.255.255.0Router-B(config-if)#encapsulation ppp /存储用户名和密码Router-B(config-if)#ppp authentication pap /选择认证式Router-B(config-if)#ppp pap sent-username Router-B password wuhu /发送用户名和密码Router-B(config-if)#no shut%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to upRouter-B(config-if)#exit第5步：查看接口配置Router-B#show interface serial1/0Serial1/0 is up, line protocol is up (connected) Hardware is HD64570 Internet address is 192.168.1.2/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input never, output never, output hang never Last clearing of show interface counters never省略第6步：测试连通性Router-B#ping 192.168.1.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 31/31/32 msRouter-B#五、注意事项1.账号与密码一定要交叉对应，发送的账号密码要和对方的账号数据库中的账号密码对应2.不要忘记配置DCE端的时钟频率通过路由器实现VLAN间路由一、实验目的掌握如何通过路由器实现VLAN间路由二、实验描述本实验通过1台路由器，实现不同VLAN间的相互通信三、实验拓扑四、实验步骤第1步：在S2960交换机上创建VLAN并分配相应端口S2960(config)#vlan 2 /创建VLANS2960(config-vlan)#exitS2960(config)#vlan 3 /创建VLANS2960(config-vlan)#exitS2960(config)#int f0/1 S2960(config-if)#sw mod accS2960(config-if)#sw acc vlan 2 S2960(config-if)#exitS2960(config)#int f0/12S2960(config-if)#sw mod accS2960(config-if)#sw acc vlan 3S2960(config-if)#exitS2960(config)#int f0/24S2960(config-if)#swi mode truck /设为trunk模式S2960(config-if)#end第2步：在R2801路由器上配置接口F0/0的子接口R2801(config)#int f0/0R2801(config-if)#no ip addR2801(config-if)#no shutdownR2801(config-if)#exitR2801(config)#int f0/0.2 /配置子接口R2801(config-if)#encapsulation dot1q 2 /封装dotlq 协议R2801(config-if)#ip add 192.168.2.1 255.255.255.0 /配置子接口ip地址R2801(config-if)#exitR2801(config)#int f0/0.3 /配置子接口R2801(config-if)#encapsulation dot1q 3 /封装dotlq 协议R2801(config-if)#ip add 192.168.3.1 25