实验十二、路由器广域网PPP 封装PAP 验证配置

实验十二、路由器广域网PPP 封装PAP 验证配置

一、实验目的

1. 掌握PAP 验证配置

2. 理解验证过程

二、应用环境

基于安全的考虑，需要路由器双方经过验证后才能建立连接

三、实验设备

1. DCR-1751 两台

2. CR-V35MT 一条

3. CR-V35FC 一条

四、实验拓扑

五、实验要求

Router-A Router-B

接口 IP 地址 接口 IP 地址

S1/1 DCE 192.168.1.1 S1/0 DTE 192.168.1.2

帐号 密码 帐号 密码

RouterA digitalchinaA RouterB digitalchinaB

六、实验步骤

第一步 Router-A 的配置

Router>enable ！进入特权模式

Router #config ！进入全局配置模式

Router _config#hostname Router-A ！修改机器名

Router-A_config#username RouterB password digitallchinaB ！设置帐号密码Router-A_config#interface s1/1 ！进入接口模式

Router-A_config_s1/0#ip address 192.168.1.1 255.255.255.0 ！配置IP 地址

Router-A_config_s1/1#encapsulation PPP ！封装PPP 协议

Router-A_config_s1/0#ppp authentication pap ！设置验证方式

Router-A_config_s1/0#ppp pap sent-username RouterA digitalchinaA

！设置发送给对方验证的帐号密码

Router-A_config_s1/0#physical-layer speed 64000 ！配置DCE 时钟频率

Router-A_config_s1/0#no shutdown

Router-A_config_s1/0#^Z ！按ctrl + z 进入特权模式

第二步：查看配置

Router-A#show interface s1/1 ！查看接口状态

Serial1/0 is up, line protocol is down ！对端没有配置，所以协议是DOWN

Mode=Sync DCE Speed=64000 ！查看DCE

DTR=UP,DSR=UP,RTS=UP,CTS=DOWN,DCD=UP

Interface address is 192.168.1.1/24 ！查看IP 地址

MTU 1500 bytes, BW 64 kbit, DLY 2000 usec

Encapsulation prototol PPP, link check interval is 10 sec ！查看封装协议

Octets Received0, Octets Sent 0

Frames Received 0, Frames Sent 0, Link-check Frames Received0

Link-check Frames Sent 89, LoopBack times 0

Frames Discarded 0, Unknown Protocols Frames Received 0, Sent failuile 0

Link-check Timeout 0, Queue Error 0, Link Error 0,

60 second input rate 0 bits/sec, 0 packets/sec!

60 second output rate 0 bits/sec, 0 packets/sec!

0 packets input, 0 bytes, 8 unused_rx, 0 no buffer

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

8 packets output, 192 bytes, 0 unused_tx, 0 underruns

error:

0 clock, 0 grace

PowerQUICC SCC specific errors:

0 recv allocb mblk fail 0 recv no buffer

0 transmitter queue full 0 transmitter hwqueue_full

第三步：Router-B 的配置

Router>enable ！进入特权模式

Router #config ！进入全局配置模式

Router _config#hostname Router-B ！修改机器名

Router-B_config#username RouterA password digitalchinaA !设置帐号密码

Router-B_config#interface s1/0 ！进入接口模式

Router-B_config_s1/0#ip address 192.168.1.2 255.255.255.0 ！配置IP 地址

Router-B_config_s1/1#encapsulation PPP ！封装PPP 协议

Router-A_config_s1/0#ppp authentication pap ！设置验证方式

Router-A_config_s1/0#ppp pap sent-username RouterB digitalchinaB ！设置发送给对方验证的帐号密码

Router-B_config_s1/0#no shutdown

Router-B_config_s1/0#^Z ！按ctrl + z 进入特权模式

第四步：查看配置

Router-A#show interface s1/0 ！查看接口状态

Serial1/0 is up, line protocol is up ！接口和协议都是up

Mode=Sync DTE ！查看DTE

DTR=UP,DSR=UP,RTS=UP,CTS=DOWN,DCD=UP

Interface address is 192.168.1.2/24 ！查看IP 地址

MTU 1500 bytes, BW 64 kbit, DLY 2000 usec

Encapsulation prototol PPP, link check interval is 10 sec ！查看封装协议

Octets Received0, Octets Sent 0

Frames Received 0, Frames Sent 0, Link-check Frames Received0

Link-check Frames Sent 89, LoopBack times 0

Frames Discarded 0, Unknown Protocols Frames Received 0, Sent failuile 0

Link-check Timeout 0, Queue Error 0, Link Error 0,

60 second input rate 0 bits/sec, 0 packets/sec!

60 second output rate 0 bits/sec, 0 packets/sec!

0 packets input, 0 bytes, 8 unused_rx, 0 no buffer

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

8 packets output, 192 bytes, 0 unused_tx, 0 underruns

error:

0 clock, 0 grace

PowerQUICC SCC specific errors:

0 recv allocb mblk fail 0 recv no buffer

0 transmitter queue full 0 transmitter hwqueue_full

第五步：测试连通性

Router-A#ping 192.168.1.2

PING 192.168.1.2 (192.168.1.2): 56 data bytes

!!!!!

--- 192.168.1.2 ping statistics ---

5 packets transmitted, 5 packets received, 0% packet loss

round-trip min/avg/max = 20/22/30 ms