实验16配置PPP

实验任务一：PPP协议基本配置

  1. 建立物理连接

  2. 接口配置Ppp协议
    [RTA-Serial1/0]link-protocol ppp
    [RTB-Serial1/0]link-protocol ppp
    [RTA-Serial1/0]baudrate 2048000
    [RTA-Serial1/0]display interface Serial 1/0
    Serial1/0
    Current state: UP
    Line protocol state: UP
    Description: Serial1/0 Interface
    Bandwidth: 64 kbps
    Maximum transmission unit: 1500
    Hold timer: 10 seconds, retry times: 5
    Internet address: 10.1.1.1/30 (primary)
    Link layer protocol: PPP
    LCP: opened, IPCP: opened
    Output queue - Urgent queuing: Size/Length/Discards 0/100/0
    Output queue - Protocol queuing: Size/Length/Discards 0/500/0
    Output queue - FIFO queuing: Size/Length/Discards 0/75/0
    Last link flapping: 0 hours 4 minutes 51 seconds
    Last clearing of counters: Never

  3. 在RTA和RTB设置静态路由即可互通。
    实验任务二：PPP PAP认证配置
    PAP验证：
    （1）被验证方以明文发送用户名和密码到主验证方。
    （2）主验证方核实用户名和密码。如果此用户合法且密码正确，则会给对端发送ACK消息，通告对端验证通过，允许进入下一阶段协商；如果用户名不正确，则发送NAK消息，通告对端验证失败。

  4. RTA配置本地用户名和密码
    [RTA]local-user rtb class network
    New local user added.
    [RTA-luser-network-rtb]service-type ppp
    [RTA-luser-network-rtb]password simple 123

  5. RTA上配置本地验证对端RTB的方式PAP
    [RTA-Serial1/0]ppp authentication-mode pap

  6. 配置完认证后复位接口
    [RTA-Serial1/0]shutdown
    [RTA-Serial1/0]undo shutdown
    4.查看接口状态
    [H3C-Serial1/0]display interface Serial 1/0
    Serial1/0
    Current state: UP
    Line protocol state: DOWN
    Description: Serial1/0 Interface
    Bandwidth: 64 kbps
    Maximum transmission unit: 1500
    Hold timer: 10 seconds, retry times: 5
    Internet address: 10.1.1.1/30 (primary)
    Link layer protocol: PPP
    LCP: closed
    Output queue - Urgent queuing: Size/Length/Discards 0/100/0
    Output queue - Protocol queuing: Size/Length/Discards 0/500/0
    Output queue - FIFO queuing: Size/Length/Discards 0/75/0
    Last link flapping: 0 hours 0 minutes 7 seconds
    Last clearing of counters: Never

发现PCA ping不通PCB
5.在RTB配置PAP配置发送的用户名和密码
[RTB-Serial1/0]ppp pap local-user rtb password simple 123

[RTA-Serial1/0]display interface Serial 1/0
Serial1/0
Current state: UP
Line protocol state: UP
Description: Serial1/0 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Hold timer: 10 seconds, retry times: 5
Internet address: 10.1.1.1/30 (primary)
Link layer protocol: PPP
LCP: opened, IPCP: opened
Output queue - Urgent queuing: Size/Length/Discards 0/100/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last link flapping: 0 hours 1 minutes 53 seconds
Last clearing of counters: Never
发现PCA 能ping通PCB
实验任务三：PPP chap认证配置
CHAP验证：
1：主验证方主动发起验证请求，向被验证方发送一个随机数值，并同时将本端的用户名一起发送给被验证方。
2：被验证方收到主验证方的验证请求之后，检查本地密码。
3：主验证方用MD5算法对报文ID，本地保存的被验证方密码和原随机数生成的一个摘要，并于收到的摘要值进行比较。如果相同，则向被验证方发送A从knowledge消息声明验证通过；如果不通过，则发送Not Acknowledge.

  1. RTA配置本地用户名和密码
    [RTA]local-user rtb class network
    New local user added.
    [RTA-luser-network-rtb]service-type ppp
    [RTA-luser-network-rtb]password simple 123
    2.RTA上配置本地验证对端RTB的方式chap
    [RTA-Serial1/0]ppp authentication-mode chap
  2. 配置完认证后复位接口
    [RTA-Serial1/0]shutdown
    [RTA-Serial1/0]undo shutdown
    4.显示接口状态
    [RTA-Serial1/0]display interface Serial 1/0
    Serial1/0
    Current state: UP
    Line protocol state: DOWN
    Description: Serial1/0 Interface
    Bandwidth: 64 kbps
    Maximum transmission unit: 1500
    Hold timer: 10 seconds, retry times: 5
    Internet address: 10.1.1.1/30 (primary)
    Link layer protocol: PPP
    LCP: closed
    Output queue - Urgent queuing: Size/Length/Discards 0/100/0
    Output queue - Protocol queuing: Size/Length/Discards 0/500/0
    Output queue - FIFO queuing: Size/Length/Discards 0/75/0
    Last link flapping: 0 hours 0 minutes 36 seconds
    Last clearing of counters: Never
    5.在RTB配置验证方式chap
    [RTB-Serial1/0]ppp chap user rtb
    [RTB-Serial1/0]ppp chap password simple 123
    实验任务四：PPP MP配置
    1.配置Mp-group接口，配置ip地址
    [RTA]interface MP-group 1
    [RTA-MP-group1]ip address 10..1.1.1 30
    [RTA-Serial1/0]ppp mp MP-group 1

[RTB]interface MP-group 1
[RTB-MP-group1]ip address 10.1.1.2 30
[RTB-Serial1/0]ppp mp MP-group 1
2.验证查看MP效果
display ppp mp
----------------------Slot0----------------------
Template: MP-group1
max-bind: 16, fragment: enabled, min-fragment: 128
Master link: MP-group1, Active members: 1, Bundle Multilink
Peer's endPoint descriptor: MP-group1
Sequence format: long (rcv)/long (sent)
Bundle Up Time: 2018/04/26 23:09:03:17
0 lost fragments, 5 reordered, 0 unassigned, 0 interleaved
Sequence: 4 (rcv)/5 (sent)
Active member channels: 1 members
Serial1/0 Up-Time:2018/04/26 23:09:03:17

display interface MP-group 1
MP-group1
Current state: UP
Line protocol state: UP
Description: MP-group1 Interface
Bandwidth: 64 kbps
Maximum transmission unit: 1500
Hold timer: 10 seconds, retry times: 5
Internet address: 10.1.1.1/30 (primary)
Link layer protocol: PPP
LCP: opened, MP: opened, IPCP: opened
Physical: MP, baudrate: 64000 bps
Output queue - Urgent queuing: Size/Length/Discards 0/100/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 7 packets, 454 bytes, 0 drops
Output: 7 packets, 454 bytes, 0 drops

posted @ 2019-07-06 22:49  Akiz  阅读(808)  评论(0)  编辑  收藏  举报