PPP基本配置与认证概述.doc

PPP基本配置与认证n 实验目的1、 串行链路上的封装概念。2、 PPP封装。3、 掌握PAP认证特点和配置方法。4、 掌握CHAP认证特点和配置方法。n 实验要求给出串行通信基本知识、PPP组成、PAP和CHAP操作和配置。给出PPP配置验证、故障排除的基本命令和基础理论。n 实验设备（环境、软件）路由器三台、串行DCE线缆2条，交叉线2条n 实验设计到的基本概念和理论给出PPP的基本组成、PPP链路建立步骤、PAP和CHAP的认证特点。n 实验过程和主要步骤步骤一：路由器基本配置路由器A的ip配置:RouterA(config)#interface FastEthernet0/0RouterA(config-if)#ip address 192.168.1.2 255.255.255.0RouterA(config-if)#no shutdownRouterA(config)#interface Serial2/0RouterA(config-if)#ip address 10.10.10.1 255.0.0.0RouterA(config-if)#ip address 10.10.10.1 255.255.255.252RouterA(config-if)#no shutdown路由器B的ip配置：RouterB(config)#interface Serial2/0RouterB(config-if)#ip address 10.10.10.2 255.0.0.0RouterB(config-if)#ip address 10.10.10.2 255.255.255.252RouterB(config-if)#%LINK-5-CHANGED: Interface Serial2/0, changed state to upno shutdownRouterB(config-if)#clock rate 56000RouterB(config)#interface Serial3/0RouterB(config-if)#ip address 20.20.20.21 255.0.0.0RouterB(config-if)#ip address 20.20.20.21 255.255.255.252RouterB(config-if)#no shutdownRouterB(config-if)#clock rate 64000路由器C的ip配置：RouterC(config)#interface FastEthernet0/0RouterC(config-if)#ip address 192.168.2.2 255.255.255.0RouterC(config-if)#no shutdownRouterC(config)#interface Serial3/0RouterC(config-if)#ip address 20.20.20.22 255.0.0.0RouterC(config-if)#ip address 20.20.20.22 255.255.255.252步骤二：配置登录用户名和密码RouterA(config)#username zhengguibing password 123RouterA(config)#line con 0RouterA(config-line)#login localRouterB(config)#username zhengguibing password 123RouterB(config)#line con 0RouterB(config-line)#login localRouterC(config)#username zhengguibing password 123RouterC(config)#line con 0RouterC(config-line)#login local 步骤三： PPP封装 步骤四：配置PAP和CHAP认证PAP认证：RouterA(config)#int s2/0RouterA(config-if)#encapsulation ppp%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to downRouterA(config-if)#ppp pap sent-username RouterA password AAARouterB(config)#username RouterA password AAARouterB(config)#int s2/0RouterB(config-if)#encapsulation pppRouterB(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to upRouterB(config-if)#ppp authentication pap%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to downRouterB(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to upRouterB(config)#int s2/0 RouterB(config-if)#encapsulation pppRouterB(config-if)#ppp pap sent-username RouterB password CCCRouterA(config)#username RouterB password CCCRouterA(config)#int s2/0RouterA(config-if)#encapsulation pppRouterA(config-if)#ppp authentication pap%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to downRouterA(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to upChap认证：RouterB(config)#username RouterC password BBBRouterB(config)#int s3/0RouterB(config-if)#encapsulation pppRouterB(config-if)#ppp authentication CHAPRouterC(config)#username RouterB password BBBRouterC(config)#int s3/0RouterC(config-if)#encapsulation pppRouterC(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial3/0, changed state to upRouterC(config-if)#ppp authentication CHAP步骤五：配置路由协议RouterA(config)#router ospf 1RouterA(config-router)#network 192.168.1.0 0.0.0.255 area 8RouterA(config-router)#network 10.10.10.0 0.0.0.3 area 8RouterB(config)#router ospf 2RouterB(config-router)#network 10.10.10.0 0.0.0.3 area 8RouterB(config-router)#network20.20.20.20 0.0.0.3 area 8RouterC(config)#router ospf 3RouterC(config-router)#network 20.20.20.20 0.0.0.3 area 8RouterC(config-router)#network 192.168.2.0 0.0.0.255 area 8步骤六：查看并验证配置RouterA#ping 10.10.10.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.10.10.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 31/31/32 msRouterA#debug ppp authenticationPPP authentication debugging is onRouterC#ping 20.20.20.21Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 20.20.20.21, timeout is 2 secon