案例四 ADSL的配置

1、案例四 ADSL的配置【背景描述】你是公司的网络管理员，两个分公司之间希望能够申请一条广域网专线进行连接。 现有锐捷路由器两台，希望你了解该设备的广域网接口所支持的协议，以确定选择哪种广域网链路。公司为了满足不断增长的业务需求，申请了专线接入，你的客户端与ISP进行链路协商时要验证身份，配置路由器保证链路建立，并考虑其安全性。【实现功能】 在链路协商时保证安全验证。链路协商时用户名、密码以明文的方式传输。【使用设备】设备类型设备名称设备数量交换机路由器Router2三层交换机串口线1计算机【实验拓扑】【实现步骤】步骤1 基本配置Router(config)#hostname RaRa(conf

2、ig)#interface serial 0Ra(config-if)#ip address 1.1.1.1 255.255.255.0Ra(config-if)#no shutdownRa(config-if)#exitRouter(config)#hostname RbRb(config)#interface serial 0Rb(config-if)#ip address 1.1.1.2 255.255.255.0Rb(config-if)#no shutdown验证测试：(以Ra为例)Ra#show interfaces serial 0Serial0 is up, line prot

3、ocol is up Hardware is HDLC4530A Internet address is 1.1.1.1/24 MTU 1500 bytes, BW 2048 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:09, output 00:00:08, output hang never Last clearing of "show interface" coun

4、ters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 65531/64/0 (size/threshold/drops) Conversations 0/1 (active/max active) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute ou

5、tput rate 0 bits/sec, 0 packets/sec 409 packets input, 57032 bytes, 0 no buffer Received 404 broadcasts 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 163 packets output, 4312 bytes, 0 underruns 0 output errors, 0 collisions, 31 interface resets 0 output buffer failures, 0 output buff

6、ers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up步骤2 配置PPP认证.被验证方的配置Ra(config)#interface serial 0Ra(config-if)#encapsulation ppp !在接口下封装PPP协议Ra(config-if)#ppp pap sent-username Ra password 0 star !PPP认证的用户名、密码验证方的配置Rb(config)#username Ra password 0 star !验证方配置被验证方的用户名、密码Rb(con

7、fig)#interface serial 0Rb(config-if)#encapsulation pppRb(config-if)#ppp authentication pap !PPP启用PAP验证过程验证测试Ra#debug ppp authentication !观察PAP认证过程(这儿认证显示不详细)PPP authentication debugging is onRa#PPP Serial0: PAP ACKRemote message is:PPP Serial0: Passed PAP authentication with remote参考配置Ra#show runnin

8、g-config !路由器Ra的配置Building configuration.Current configuration:!version 6.14(9coll)!hostname "Ra"!ip subnet-zero!interface FastEthernet0 no ip address shutdown!interface FastEthernet1 no ip address shutdown!interface FastEthernet2 no ip address shutdown!interface FastEthernet3 no ip addres

9、s shutdown!interface Serial0 ip address 1.1.1.1 255.255.255.0 encapsulation ppp ppp pap sent-username Ra password 7 1234111358!interface Serial1 no ip address shutdown!interface Serial2 no ip address shutdown!interface Serial3 no ip address shutdown!ip classless!line con 0line aux 0line vty 0 4 logi

10、nline vty 5 19 login!endRb#show running-config !路由器Rb的配置Building configuration.Current configuration:!version 6.14(9coll)!hostname "Rb"!username Ra password 7 0059344251!ip subnet-zero!interface FastEthernet0 no ip address shutdown!interface FastEthernet1 no ip address shutdown!interface F

11、astEthernet2 no ip address shutdown!interface FastEthernet3 no ip address shutdown!interface Serial0 ip address 1.1.1.2 255.255.255.0 encapsulation ppp clock rate 64000 ppp authentication pap!interface Serial1 no ip address shutdown!ip classless!line con 0line aux 0line vty 0 4 loginline vty 5 19 login!end【注意事项】1.在DCE端