实验拓扑:
1、R1和R2使用PPP链路直连,R2和R3把2条PPP链路捆绑为PPP MP直连
2、按照图示配置IP地址
3、R2对R1的PPP进行单向chap验证
4、R2和R3的PPP进行双向chap验证
实验内容:
R1配置:
#修改名称
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys
[Huawei]sysname R1#配置ip地址
[R1]int Serial 3/0/0
[R1-Serial3/0/0]ip add 192.168.1.1 24
[R1-Serial3/0/0]
R2配置:
#创建Mp-group接口并配置ip地址
[R2]int Mp-group 0/0/0
[R2-Mp-group0/0/0]ip add 192.168.2.2 24
[R2-Mp-group0/0/0]#将接口加入到Mp-group组中
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
R3配置:
#配置Mp-group接口并配置ip地址
[R3]int Mp-group 0/0/0
[R3-Mp-group0/0/0]ip add 192.168.2.3 24
[R3-Mp-group0/0/0]#将接口加入到Mp-group组中
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
[R3-Serial3/0/1]q
[R3]int se
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
R2与R3之间可通信
R1与R2之间可通信
R2对R1的PPP进行单向chap验证:
#主验证方配置:配置用户列表及验证方式
[R2-aaa]local-user liudaye password cipher ldy123
Info: Add a new user.
[R2-aaa]local-user liudaye service-type ppp
[R2-aaa]q
[R2]int Serial 3/0/0
[R2-Serial3/0/0]ppp au
[R2-Serial3/0/0]ppp authentication-mode chap #被验证方配置:配置验证用户名
[R1]int se3/0/0
[R1-Serial3/0/0]ppp chap user liudaye
[R1-Serial3/0/0]ppp chap password cipher ldy123
验证成功
R2和R3的PPP进行双向chap验证:
#当R2对R3ppp验证配置
#主验证方
[R2]aaa
[R2-aaa]local-user zhangdaye password cipher zdy123
Info: Add a new user.
[R2-aaa]local-user zhangdaye service-type ppp
[R2-aaa]q
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp authentication-mode chap
[R2-Serial4/0/0]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp authentication-mode chap#被验证方
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp chap user zhangdaye
[R3-Serial3/0/1]ppp chap password cipher zdy123
[R3-Serial3/0/1]q
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp chap user zhangdaye
[R3-Serial3/0/0]ppp chap password cipher zdy123#当R3对R2ppp验证配置
#主验证方
[R3]aaa
[R3-aaa]local-user wangdaye password cipher wdy123
Info: Add a new user.
[R3-aaa]local-user wangdaye service-type ppp
[R3-aaa]q
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp authentication-mode chap
[R3-Serial3/0/1]q
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp authentication-mode chap #被验证方
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp chap user wangdaye
[R2-Serial4/0/0]ppp chap password cipher wdy123
[R2-Serial4/0/0]q
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp chap user wangdaye
[R2-Serial3/0/1]ppp chap password cipher wdy123
[R2-Serial3/0/1]q
验证: