PPP点到点协议配置-思科《PPP及验证实验》实验指导书

1、思科PPP及验证实验实验指导书刘易（北京信息职业技术学院）摘 要：在本文中主要思科rip协议的配置，从实验目的，拓扑图，实验配置等多个方面进行介绍。关键词：思科；rip协议；实验 1实验目的(1) 理解点对点PPP的广域网接入技术(2) 理解PPP链路中的PAP与CHAP验证的区别(3) 掌握PAP验证的配置方法(4) 掌握CHAP验证的配置方法2 实验环境 2.1 拓扑图图1拓扑图2.2 IP地址规划设备名称IP地址子网掩码网关PC_A192.168.1.10255.255.255.0192.168.1.254PC_B192.168.1.11255.255.255.0192.168.1.25

2、4PC_C192.168.3.10255.255.255.0192.168.3.254PC_D192.168.3.11255.255.255.0192.168.3.254设备名称F0/0 S0/1 RA192.168.1.254/24192.168.2.1/24RB192.168.3.254/24192.168.2.2/243 实验内容及要求3.1网络环境配置与连接将给定的实验设备按实验拓朴进行连接，自己选择使用的网络连接线的类型：注意：l 路由器的控制端口(Console)与PC机的串口（COM1或COM2）使用Console控制线l 路由器计算机的通过网络接口的连接使用RJ-45的网线，应

3、选择交叉线。3.2 分组要求每个实验组分为两人一组，分别配置与自己PC机直连的路由器3.3实验配置要求(1) 为你的网络设备规划IP地址、主机名、并设置路由器的密码。注意：由两台路由器连接了三个网络，因此，各网段的IP地址要明确划分，不能冲突。(2) 将规划好的IP地址配置到网络设备中，并测试IP地址的正确性。3.4 配置静态路由协议(1) 根据实验拓朴图连接网络环境(2) 配置PAP验证，测试网络的连通性(3) 配置CHAP验让，测试网络的连通性(4) 在时间的同学完成附加内容：全网RIP连通,CHAP验证。注意事项：PAP验证时验证方（中心路由器）的用户名为对方的主机名和密码CHAP验证时

4、双互用对方的用户名，密码需要使用一致的。3.5恢复所有的实验设备l 将所使用的设备的连接线收回并码放整齐l 恢复路由器的初始配置l 关闭所有设备的电源4 实验报告要求 a) 画出实验网络环境拓朴，并标名IP地址规划信息b) 在图上标识路由器和PC机的主机名、密码c) 写出实验过程完成静态路由器的配置所使用的命令d) 分析实验过程中配置网络设备的命令，并写出现的问题的解决的方案5实验配置 5.1 RA的配置：RouterenRouter#configure terminal Enter configuration commands, one per line. End with CNTL/Z.R

5、outer(config)#hostname RAl为f0/0配置IP地址RA(config)#interface fastEthernet 0/0RA(config-if)#ip address 192.168.1.254 255.255.255.0RA(config-if)#no shutdownl为s0/1配置IP地址RA(config)#interface serial 0/1RA(config-if)#encapsulation pppRA(config-if)#ip address 192.168.2.1 255.255.255.0RA(config-if)#no shutdown

6、RA(config-if)#exitl配置动态路由RIPRA(config)#router ripRA(config-router)#network 192.168.1.0RA(config-router)#network 192.168.2.05.2 RB的配置RouterenRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname RBl为f0/0配置IP地址RB(config)#interface fastEthernet 0/0RB(config-if

7、)#ip address 192.168.3.254 255.255.255.0RB(config-if)#no shutdownl为s0/1配置IP地址，并在DCE端配置时钟速率RB(config)#interface serial 0/1RB(config-if)#encapsulation pppRB(config-if)#clock rate 64000RB(config-if)#ip address 192.168.2.2 255.255.255.0RB(config-if)#no shutdownRB(config-if)#exitl配置动态路由RIPRB(config)#rout

8、er ripRB(config-router)#network 192.168.2.0RB(config-router)#network 192.168.3.05.3 PC_A的IP地址配置，PC_B,PC_C和PC_D上的IP地址配置参照PC_A的配置。6 测试步骤 (1) 在路由器上配置PAP验证RA(config)#username RB password 123配置串口的PAP验证RA(config)#interface serial 0/1RA(config-if)#ppp authentication papRB(config-if)#ppp pap sent-username R

9、B password 123测试步骤： 打开debug信息，察看ppp验证的协商信息RA#debug ppp authenticationPPP authentication debugging is onRA#terminal monitor% Console already monitorsRA#*Mar 1 02:09:01.341: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down*Mar 1 02:09:07.924: %LINK-3-UPDOWN: Interface Serial0/1, changed stat

10、e to up*Mar 1 02:09:07.924: Se0/1 PPP: Using default call direction*Mar 1 02:09:07.924: Se0/1 PPP: Treating connection as a dedicated line*Mar 1 02:09:07.924: Se0/1 PPP: Authorization required*Mar 1 02:09:07.936: Se0/1 PAP: I AUTH-REQ id 1 len 11 from RB*Mar 1 02:09:07.936: Se0/1 PAP: Authenticating

11、 peer RB*Mar 1 02:09:07.936: Se0/1 PPP: Sent PAP LOGIN Request*Mar 1 02:09:07.936: Se0/1 PPP: Received LOGIN Response PASS*Mar 1 02:09:07.940: Se0/1 PPP: Sent LCP AUTHOR Request*Mar 1 02:09:07.940: Se0/1 PPP: Sent IPCP AUTHOR Request*Mar 1 02:09:07.940: Se0/1 LCP: Received AAA AUTHOR Response PASS*M

12、ar 1 02:09:07.940: Se0/1 IPCP: Received AAA AUTHOR Response PASS*Mar 1 02:09:07.944: Se0/1 PAP: O AUTH-ACK id 1 len 5*Mar 1 02:09:07.944: Se0/1 PPP: Sent CDPCP AUTHOR Request*Mar 1 02:09:07.944: Se0/1 CDPCP: Received AAA AUTHOR Response PASS*Mar 1 02:09:07.948: Se0/1 PPP: Sent IPCP AUTHOR Request*Ma

13、r 1 02:09:08.945: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state to up 从RA上ping RB，能够ping通，说明链路已经建立起来。RA#ping 192.168.2.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/

14、max = 28/28/28 msRA# 察看接口信息RA#show ip interface briefInterface IP-Address OK? Method Status ProtocolFastEthernet0/0 192.168.1.254 YES manual up upSerial0/0 unassigned YES unset administratively down downFastEthernet0/1 unassigned YES unset administratively down downSerial0/1 192.168.2.1 YES manual u

15、p up(2) 在路由器上配置CHAP验证在RA上配置CHAP验证RA(config)#username RB password 123RA(config)#interface serial 0/1RA(config-if)#ppp authentication chap在RB上配置CHAP验证RB(config)#username RA password 123RB(config)#interface serial 0/1RB(config-if)#ppp authentication chap测试步骤： 打开debug信息，察看ppp验证的协商信息RA#debug ppp authenti

16、cationPPP authentication debugging is onRA#terminal monitor% Console already monitors将接口进行shutdown和 no shutdown操作RA(config)#interface serial 0/1RA(config-if)#shutdownRA(config-if)#no shutdownRA上的信息显示RA(config-if)#*Mar 1 01:10:22.152: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up*Mar 1 01:

17、10:22.152: Se0/1 PPP: Using default call direction*Mar 1 01:10:22.152: Se0/1 PPP: Treating connection as a dedicated line*Mar 1 01:10:22.152: Se0/1 PPP: Authorization required*Mar 1 01:10:22.160: Se0/1 CHAP: O CHALLENGE id 62 len 23 from RA*Mar 1 01:10:22.168: Se0/1 CHAP: I CHALLENGE id 4 len 23 fro

18、m RB*Mar 1 01:10:22.168: Se0/1 CHAP: Using hostname from unknown source*Mar 1 01:10:22.168: Se0/1 CHAP: Using password from AAA*Mar 1 01:10:22.168: Se0/1 CHAP: O RESPONSE id 4 len 23 from RA*Mar 1 01:10:22.172: Se0/1 CHAP: I RESPONSE id 62 len 23 from RB*Mar 1 01:10:22.172: Se0/1 PPP: Sent CHAP LOGI

19、N Request*Mar 1 01:10:22.176: Se0/1 PPP: Received LOGIN Response PASS*Mar 1 01:10:22.176: Se0/1 PPP: Sent LCP AUTHOR Request*Mar 1 01:10:22.176: Se0/1 PPP: Sent IPCP AUTHOR Request*Mar 1 01:10:22.180: Se0/1 LCP: Received AAA AUTHOR Response PASS*Mar 1 01:10:22.180: Se0/1 IPCP: Received AAA AUTHOR Respon