1、 PPP基本配置與認(rèn)證n 實(shí)驗(yàn)?zāi)康?、 串行鏈路上的封裝概念。2、 PPP封裝。3、 掌握PAP認(rèn)證特點(diǎn)和配置方法。4、 掌握CHAP認(rèn)證特點(diǎn)和配置方法。n 實(shí)驗(yàn)要求給出串行通信基本知識(shí)、PPP組成、PAP和CHAP操作和配置。給出PPP配置驗(yàn)證、故障排除的基本命令和基礎(chǔ)理論。n 實(shí)驗(yàn)設(shè)備（環(huán)境、軟件）路由器三臺(tái)、串行DCE線纜2條，交叉線2條n 實(shí)驗(yàn)設(shè)計(jì)到的基本概念和理論給出PPP的基本組成、PPP鏈路建立步驟、PAP和CHAP的認(rèn)證特點(diǎn)。n 實(shí)驗(yàn)過程和主要步驟步驟一：路由器基本配置路由器A的ip配置:RouterA(config)#interface FastEthernet0/0Rout

2、erA(config-if)#ip address 192.168.1.2 255.255.255.0RouterA(config-if)#no shutdownRouterA(config)#interface Serial2/0RouterA(config-if)#ip address 10.10.10.1 255.0.0.0RouterA(config-if)#ip address 10.10.10.1 255.255.255.252RouterA(config-if)#no shutdown路由器B的ip配置：RouterB(config)#interface Serial2/0Rou

3、terB(config-if)#ip address 10.10.10.2 255.0.0.0RouterB(config-if)#ip address 10.10.10.2 255.255.255.252RouterB(config-if)#%LINK-5-CHANGED: Interface Serial2/0, changed state to upno shutdownRouterB(config-if)#clock rate 56000RouterB(config)#interface Serial3/0RouterB(config-if)#ip address 20.20.20.2

4、1 255.0.0.0RouterB(config-if)#ip address 20.20.20.21 255.255.255.252RouterB(config-if)#no shutdownRouterB(config-if)#clock rate 64000路由器C的ip配置：RouterC(config)#interface FastEthernet0/0RouterC(config-if)#ip address 192.168.2.2 255.255.255.0RouterC(config-if)#no shutdownRouterC(config)#interface Seria

5、l3/0RouterC(config-if)#ip address 20.20.20.22 255.0.0.0RouterC(config-if)#ip address 20.20.20.22 255.255.255.252步驟二：配置登錄用戶名和密碼RouterA(config)#username zhengguibing password 123RouterA(config)#line con 0RouterA(config-line)#login localRouterB(config)#username zhengguibing password 123RouterB(config)#

6、line con 0RouterB(config-line)#login localRouterC(config)#username zhengguibing password 123RouterC(config)#line con 0RouterC(config-line)#login local 步驟三： PPP封裝 步驟四：配置PAP和CHAP認(rèn)證PAP認(rèn)證：RouterA(config)#int s2/0RouterA(config-if)#encapsulation ppp%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/

7、0, changed state to downRouterA(config-if)#ppp pap sent-username RouterA password AAARouterB(config)#username RouterA password AAARouterB(config)#int s2/0RouterB(config-if)#encapsulation pppRouterB(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to upRouterB(confi

8、g-if)#ppp authentication pap%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to downRouterB(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to upRouterB(config)#int s2/0 RouterB(config-if)#encapsulation pppRouterB(config-if)#ppp pap sent-us

9、ername RouterB password CCCRouterA(config)#username RouterB password CCCRouterA(config)#int s2/0RouterA(config-if)#encapsulation pppRouterA(config-if)#ppp authentication pap%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to downRouterA(config-if)#%LINEPROTO-5-UPDOWN: Line pr

10、otocol on Interface Serial2/0, changed state to upChap認(rèn)證：RouterB(config)#username RouterC password BBBRouterB(config)#int s3/0RouterB(config-if)#encapsulation pppRouterB(config-if)#ppp authentication CHAPRouterC(config)#username RouterB password BBBRouterC(config)#int s3/0RouterC(config-if)#encapsul

11、ation pppRouterC(config-if)#%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial3/0, changed state to upRouterC(config-if)#ppp authentication CHAP步驟五：配置路由協(xié)議RouterA(config)#router ospf 1RouterA(config-router)#network 192.168.1.0 0.0.0.255 area 8RouterA(config-router)#network 10.10.10.0 0.0.0.3 area

12、 8RouterB(config)#router ospf 2RouterB(config-router)#network 10.10.10.0 0.0.0.3 area 8RouterB(config-router)#network20.20.20.20 0.0.0.3 area 8RouterC(config)#router ospf 3RouterC(config-router)#network 20.20.20.20 0.0.0.3 area 8RouterC(config-router)#network 192.168.2.0 0.0.0.255 area 8步驟六：查看并驗(yàn)證配置R

13、outerA#ping 10.10.10.2Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.10.10.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 31/31/32 msRouterA#debug ppp authenticationPPP authentication debugging is onRouterC#ping 20.20.20.21Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 20.20.20.21, timeout is 2 secon