网络系统集成课程设计(-PPP的PAP和CHAP认证)

姓名： 班级： 学号： 年级： 12级指导教师：成绩：信息学院 网络系统集成课程实践 实验报告实验名称 PPP的PAP和CHAP认证实验日期：2015年04月15日1、 实验目的：掌握PPP PAP认证和PPP CHAP认证的过程及配置。2、 实验内容（1）在路由器上配置PPP PAP认证；（2）在路由器上配置PPP CHAP认证。3、 实验要求（1）写出在路由器上配置PPP PAP认证的过程；（2）写出在路由器上配置PPP CHAP认证的过程4、 实验设备（1） 路由器Router-2811两台； （2） DCE串口线5、 实验步骤（一）PPP PAP认证（本实验要求配置路由器R1和路由器R2双向PAP验证）实验网络拓补结构设计1、配置路由器R1R1enableR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#username R2 password cisco /以对方的主机名作为用户名，密码和对方路由器一致，在验证方配置被验证方用户名密码R1(config)#int loop0R1(config-if)#ip address 1.1.1.1 255.255.255.0R1(config-if)#int s 0/3/0R1(config-if)#ip address 192.168.1.1 255.255.255.0R1(config-if)#encapsulation ppp /接口下封装数据链路层PPP协议R1(config-if)#ppp authentication pap /PPP启用PAP认证方式R1(config-if)#ppp pap sent-username R1 password cisco/PAP认证的用户名、密码R1(config-if)#no shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to upR1(config-if)#exitR1(config)#exitR1#%SYS-5-CONFIG_I: Configured from console by console2、配置路由器R2RouterenableRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R2R2(config)#username R1 password cisco /以对方的主机名作为用户名，密码和对方路由器一致，在验证方配置被验证方用户名密码R2(config)#int loop0R2(config-if)#%LINK-5-CHANGED: Interface Loopback0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to upR2(config-if)#ip address 2.2.2.2 255.255.255.0R2(config-if)#int s 0/3/0R2(config-if)#ip address 192.168.1.1 255.255.255.0R2(config-if)#encapsulation ppp /接口下封装数据链路层PPP协议R2(config-if)#ppp authentication pap /PPP启用PAP认证方式R2(config-if)#ppp pap sent-username R2 password cisco/PAP认证的用户名、密码R2(config-if)#no shutdownR2(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to upR2(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to upR2(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to down%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to down%LINK-5-CHANGED: Interface Serial0/3/0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to up3、配置完成Router1和Router2后，在Router1上进行测试R1#debug ppp authentication/打开PPP认证调试PPP authentication debugging is onR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#int s 0/3/0R1(config-if)#shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to administratively down%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to downR1(config-if)#no shutdown/端口关闭之后再打开，就可以看到PAP认证的重新建立过程R1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to upSerial0/3/0 Using hostname from interface PAPSerial0/3/0 Using password from interface PAPSerial0/3/0 PAP: O AUTH-REQ id 17 len 15Serial0/3/0 PAP: Phase is FORWARDING, Attempting ForwardSerial0/3/0 PAP: I AUTH-REQ id 17 len 15Serial0/3/0 PAP: Authenticating peerSerial0/3/0 PAP: Phase is FORWARDING, Attempting ForwardSerial0/3/0 Using hostname from interface PAPSerial0/3/0 Using password from interface PAPSerial0/3/0 PAP: O AUTH-REQ id 17 len 15Serial0/3/0 PAP: Phase is FORWARDING, Attempting Forward%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to up4、查看网络拓补图从图上可以看出，路由器之间已经联通5、当R1和R2密码不一致时，再次进行测试R1(config)#int s 0/3/0R1(config-if)#no ppp pap sent-username R1 password cisco/修改路由器R1上的密码，是路由器R1和R2的密码不一致，可以看到，认证将失败R1#debug ppp authenticationPPP authentication debugging is onR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#int s 0/3/0R1(config-if)#shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to administratively down%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to downR1(config-if)#no shutdown当发出no shutdown命令时，出现了死循环，用Ctrl+c强制退出并用end结束。6、检查网络拓补图由此可以看出，当两个路由器密码不一样时，两路由器无法联通。（2） PPP CHAP认证网络实验拓补结构1、 配置路由器R1RouterenableRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R1R1(config)#username R2 password ciscoR1(config)#int loop0R1(config-if)#%LINK-5-CHANGED: Interface Loopback0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to upR1(config-if)#ip address 1.1.1.1 255.255.255.0R1(config-if)#int s 0/3/0R1(config-if)#ip address 192.168.1.1 255.255.255.0R1(config-if)#encapsulation pppR1(config-if)#ppp authentication chapR1(config-if)#ppp pap sent-username R1 password ciscoR1(config-if)#no shutdown%LINK-5-CHANGED: Interface Serial0/3/0, changed state to downRouter(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to up2、 配置路由器R2RouterenableRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R2R2(config)#username R1 password ciscoR2(config)#int loop0R2(config-if)#%LINK-5-CHANGED: Interface Loopback0, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to upR2(config-if)#ip address 2.2.2.2 255.255.255.0R2(config-if)#int s 0/3/3%Invalid interface type and numberR2(config)#int s 0/3/0R2(config-if)#int s 0/3/0R2(config-if)#ip address 192.168.1.1 255.255.255.0R2(config-if)#encapsulation pppR2(config-if)#ppp authentication chapR2(config-if)#ppp pap sent-username R2 password ciscoR2(config-if)#no shutdownR2(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to up3、 在R1上进行测试R1#debug ppp authenticationPPP authentication debugging is onR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#int s 0/3/0R1(config-if)#shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to administratively down%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to downR1(config-if)#no shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, changed state to upSerial0/3/0 IPCP: O CONFREQ Closed id 1 len 10Serial0/3/0 IPCP: I CONFACK Closed id 1 len 10Serial0/3/0 IPCP: O CONFREQ Closed id 1 len 10Serial0/3/0 IPCP: I CONFACK REQsent id 1 len 10Serial0/3/0 IPCP: I CONFREQ Closed id 1 len 10Serial0/3/0 IPCP: O CONFACK Closed id 1 len 10Serial0/3/0 IPCP: I CONFREQ REQsent id 1 len 10Serial0/3/0 IPCP: O CONFACK REQsent id 1 len 10Serial0/3/0 IPCP: O CONFREQ Closed id 1 len 10Serial0/3/0 IPCP: I CONFACK Closed id 1 len 10Serial0/3/0 IPCP: O CONFREQ Closed id 1 len 10Serial0/3/0 IPCP: I CONFACK REQsent id 1 len 10%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/3/0, changed state to up4、 显示网络拓补图，发现路由器配置并连接成功。5、 修改R1上的密码，再次进行测试R1(config-if)#exitR1(config)#int s 0/3/0R1(config-if)#no ppp pap sent-username R1 password ciscoR1(config-if)#R1(config-if)#exitR1(config)#exitR1#%SYS-5-CONFIG_I: Configured from console by consoleR1#debug ppp authenticationPPP authentication debugging is onR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#int s 0/3/0R1(config-if)#shutdownR1(config-if)#%LINK-5-CHANGED: Interface Serial0/3/0, change