GNS3模拟PPP封装CHAP验证配置.docVIP

PPP封装CHAP验证配置 一、实验目的 1.掌握CHAP验证配置 2.理解验证过程 二、实验描述 基于安全的考虑，需要路由器双方验证通过后才能建立连接 三、实验拓扑 实验步骤 第1步：接口地址配置 R1: S1/0: 192.168.1.1 255.255.255.0 R2: S1/0:192.168.1.2 255.255.255.0 第2步：R1的配置 R1#config t R1(config)#int s1/1 R1(config-if)#ip address 192.168.1.1 255.255.255.0 R1(config-if)#no shut R1(config-if)#exit R1(config)#username R2 pass 123 设置账号和密码 R1(config)#int s1/1 R1(config-if)#encapsulation ppp 封装PPP R1(config-if)#ppp authentication chap 选择认证方式 R1(config-if)#ppp pap sent-username R1 password 123 设置发送给对方的账号和密码 R1(config-if)#clock rate 9600 R1(config-if)#exit 第3步：查看接口配置 R1#show interface serial 1/1 Serial1/0 is up, line protocol is down (disabled) 对端没有设置PPP 所以不可用 Hardware is HD64570 Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Closed Closed: LEXCP, BRIDGECP, IPCP, CCP, CDPCP, LLC2, BACP Last input never, output never, output hang never 第4步：R2的配置 R2的配置 R2(config)#user R1 password 123 R2(config)#int s1/0 R2(config-if)#ip add 192.168.1.2 255.255.255.0 R2(config-if)#clock rate 9600 R2(config-if)#encapsulation ppp R2(config-if)#ppp authentication chap R2(config-if)#no sh 第5步：查看接口配置 R2#show interface serial1/0 Serial1/0 is up, line protocol is up (connected) Hardware is HD64570 Internet address is 192.168.1.2/24 MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input never, output never, output hang never Last clearing of show interface counters never省略 第6步：测试连通性 R2#ping 192.168.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 31/31/32 ms R2# 六、注意事项 1.账号与密码一定要交叉对应，发送的账号密码要和对方的账号数据库中的账号密码对应 2.不要忘记配置DCE端的时钟频率