实验十PPP及验证实验

1、实验十三 ppp及验证实验实验目的:1. 理解点对点PPP的广域网接入技术2. 理解PPP链路中的PAP与CHAP验证的区别3. 掌握PAP验证的配置方法4. 掌握CHAP验证的配置方法实验环境：（自己连接线缆）1、组网图Router_A S0/1口E0/0192.16820Web/FTP Server，LPC BRouter_B实验十三 实验拓朴直连线V3.5 线交叉线2、IP地址规划PC_A :Ip 地址：0 子网掩码： 网关：PC_B :Ip 地址： 1 子网掩码： 网关： PC_C :Ip

2、 地址： 0 子网掩码： 网关： PC_D :Ip 地址： 1 子网掩码： 网关： Router_A ：F0/0：54 子网掩码： S0/1： 子网掩码： Router_B ：F0/0：54 子网掩码： S0/1： 子网掩码： 三、实验内容及要求：1根据实验拓朴图连接网络环境2配置 PAP 验证，测试网络的连通性3配置 CHAP 验让，测试网络的连通性4在时间的同学完成附加内容：全网 RIP 连通 ,CHAP

3、 验证注意事项：PAP验证时验证方(中心路由器)的用户名为对方的主机名和密码CHAP 验证时双互用对方的用户名，密码需要使用一致的。6恢复所有的实验设备将所使用的设备的连接线收回并码放整齐恢复路由器的初始配置关闭所有设备的电源四、实验报告要求1画出实验网络环境拓朴。2写出实验过程所有路由器的配置内容。 3写出不同的验证方法的配置命令内容 3分析实验过程中配置网络设备的命令，并写出现的问题的解决的方案五、实验配置1、Router_ A 的配置(Router _ A 命名为：RA):RouterenRouter#configure terminalEnter configuration comma

4、nds, one per line. End with CNTL/Z.Router(config)#hostname RA为 f0/0 配置 IP 地址RA(config)#interface fastEthernet 0/0RA(config-if)#ip address RA(config-if)#no shutdown为 s0/1 配置 IP 地址RA(config)#interface serial 0/1RA(config-if)#encapsulation pppRA(config-if)#ip address RA(config-if)#no shutdownRA(config-

5、if)#exit配置动态路由 RIPRA(config)#router ripRA(config-router)#network RA(config-router)#network 2、Router_ B 的配置(Router _ B 命名为：RB):RouterenRouter#conf tEnter configuration commands, one per line. End with CNTL/Z. Router(config)#hostname RB为 f0/0 配置 IP 地址RB(config)#interface fastEthernet 0/0RB(config-if)#

6、ip address RB(config-if)#no shutdown为sO/1配置IP地址，并在DCE端配置时钟速率RB(config)#interface serial 0/1RB(config-if)#encapsulation pppRB(config-if)#clock rate 64000RB(config-if)#ip address RB(config-if)#no shutdownRB(config-if)#exit配置动态路由 RIPRB(config)#router ripRB(config-router)#network RB(config-router)#netwo

7、rk 4、PC_A的IP地址配置，PC_B,PC_C和PC_D上的IP地址配置参照 PC_A的配nternet协该仃匸PMP）屋性疇欽崙翳籍韻黠羅1勰蹩畫设至否则r自动荻得IF幽址辺严 KffEfEOOSip地址（X）:子网掩码：默认岡关；高级世）确定取消1r目动获毎DHS服务器地址电）a使用下面的EHS服务器地址）： 首选DNS服务器功:r备用DNS服务器）:r六、测试步骤1、在路由器上配置 PAP 验证RA(config)#username RB password 123配置串口的 PAP 验证RA(config)#interface serial 0/1RA(config-if)#ppp

8、 authentication papRB(config-if)#ppp pap sent-username RB password 123测试步骤：( 1 )、打开 debug 信息，察看 ppp 验证的协商信息 RA#debug ppp authenticationPPP authentication debugging is onRA#terminal monitor% Console already monitorsRA#*Mar 1 02:09:01.341: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down *Ma

9、r 1 02:09:07.924: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up*Mar 1 02:09:07.924: Se0/1 PPP: Using default call direction*Mar 1 02:09:07.924: Se0/1 PPP: Treating connection as a dedicated line*Mar 1 02:09:07.924: Se0/1 PPP: Authorization required*Mar 1 02:09:07.936: Se0/1 PAP: I AUTH-RE

10、Q id 1 len 11 from RB*Mar 1 02:09:07.936: Se0/1 PAP: Authenticating peer RB*Mar 1 02:09:07.936: Se0/1 PPP: Sent PAP LOGIN Request*Mar 1 02:09:07.936: Se0/1 PPP: Received LOGIN Response PASS*Mar 1 02:09:07.940: Se0/1 PPP: Sent LCP AUTHOR Request*Mar 1 02:09:07.940: Se0/1 PPP: Sent IPCP AUTHOR Request

11、*Mar 1 02:09:07.940: Se0/1 LCP: Received AAA AUTHOR Response PASS*Mar 1 02:09:07.940: Se0/1 IPCP: Received AAA AUTHOR Response PASS*Mar 1 02:09:07.944: Se0/1 PAP: O AUTH-ACK id 1 len 5*Mar 1 02:09:07.944: Se0/1 PPP: Sent CDPCP AUTHOR Request*Mar 1 02:09:07.944: Se0/1 CDPCP: Received AAA AUTHOR Respo

12、nse PASS*Mar 1 02:09:07.948: Se0/1 PPP: Sent IPCP AUTHOR Request*Mar 1 02:09:08.945: %LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0/1,changed state to up2）从 RA 上 ping RB ，能够 ping 通，说明链路已经建立起来。RA#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 se

13、conds: !Success rate is 100 percent (5/5), round-trip min/avg/max = 28/28/28 ms RA#3)察看接口信息RA#show ip interface briefInterfaceIP-AddressOK? Method StatusProtocolFastEthernet0/0YES manual upupSerial0/0unassignedYES unset administratively down downFastEthernet0/1unassignedYES unset administratively do

14、wn downSerial0/1YES manual upup2、在路由器上配置 CHAP 验证在 RA 上配置 CHAP 验证RA(config)#username RB password 123RA(config)#interface serial 0/1RA(config-if)#ppp authentication chap在 RB 上配置 CHAP 验证RB(config)#username RA password 123RB(config)#interface serial 0/1RB(config-if)#ppp authentication chap测试步骤：( 1 )、打开

15、debug 信息，察看 ppp 验证的协商信息RA#debug ppp authenticationPPP authentication debugging is onRA#terminal monitor% Console already monitors将接口进行 shutdown 和 no shutdown 操作RA(config)#interface serial 0/1RA(config-if)#shutdownRA(config-if)#no shutdownRA 上的信息显示RA(config-if)#*Mar 1 01:10:22.152: %LINK-3-UPDOWN: In

16、terface Serial0/1, changed state to up*Mar 1 01:10:22.152: Se0/1 PPP: Using default call direction*Mar 1 01:10:22.152: Se0/1 PPP: Treating connection as a dedicated line*Mar 1 01:10:22.152: Se0/1 PPP: Authorization required*Mar 1 01:10:22.160: Se0/1 CHAP: O CHALLENGE id 62 len 23 from RA*Mar 1 01:10

17、:22.168: Se0/1 CHAP: I CHALLENGE id 4 len 23 from RB*Mar 1 01:10:22.168: Se0/1 CHAP: Using hostname from unknown source*Mar 1 01:10:22.168: Se0/1 CHAP: Using password from AAA*Mar 1 01:10:22.168: Se0/1 CHAP: O RESPONSE id 4 len 23 from RA*Mar 1 01:10:22.172: Se0/1 CHAP: I RESPONSE id 62 len 23 from

18、RB*Mar 1 01:10:22.172: Se0/1 PPP: Sent CHAP LOGIN Request*Mar 1 01:10:22.176: Se0/1 PPP: Received LOGIN Response PASS*Mar 1 01:10:22.176: Se0/1 PPP: Sent LCP AUTHOR Request*Mar 1 01:10:22.176: Se0/1 PPP: Sent IPCP AUTHOR Request*Mar 1 01:10:22.180: Se0/1 LCP: Received AAA AUTHOR Response PASS*Mar 1

19、01:10:22.180: Se0/1 IPCP: Received AAA AUTHOR Response PASS*Mar 1 01:10:22.180: Se0/1 CHAP: O SUCCESS id 62 len 4*Mar 1 01:10:22.180: Se0/1 CHAP: I SUCCESS id 4 len 4*Mar 1 01:10:22.184: Se0/1 PPP: Sent CDPCP AUTHOR Request*Mar 1 01:10:22.184: Se0/1 CDPCP: Received AAA AUTHOR Response PASS*Mar 1 01:10:22.188: Se0/1 PPP: Sent IPCP AUTHOR Request*Mar 1 01:10:23.182: %LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0/1,changed state to up2)从 RA 上 ping RB ，能够 ping 通，说明链路已经建立起来。 RA#ping Type escape sequence to abort.Sending 5, 10