实验十二、路由器广域网PPP 封装PAP 验证配置
实验十二、路由器广域网PPP 封装PAP 验证配置
一、实验目的
1. 掌握PAP 验证配置
2. 理解验证过程
二、应用环境
基于安全的考虑，需要路由器双方经过验证后才能建立连接
三、实验设备
1. DCR-1751 两台
2. CR-V35MT 一条
3. CR-V35FC 一条
四、实验拓扑
五、实验要求
Router-A Router-B
接口 IP 地址 接口 IP 地址
S1/1 DCE 192.168.1.1 S1/0 DTE 192.168.1.2
帐号 密码 帐号 密码
RouterA digitalchinaA RouterB digitalchinaB
六、实验步骤
第一步 Router-A 的配置
Router>enable ！进入特权模式
Router #config ！进入全局配置模式
Router _config#hostname Router-A ！修改机器名
Router-A_config#username RouterB password digitallchinaB ！设置帐号密码Router-A_config#interface s1/1 ！进入接口模式
Router-A_config_s1/0#ip address 192.168.1.1 255.255.255.0 ！配置IP 地址
Router-A_config_s1/1#encapsulation PPP ！封装PPP 协议
Router-A_config_s1/0#ppp authentication pap ！设置验证方式
Router-A_config_s1/0#ppp pap sent-username RouterA digitalchinaA
！设置发送给对方验证的帐号密码
Router-A_config_s1/0#physical-layer speed 64000 ！配置DCE 时钟频率
Router-A_config_s1/0#no shutdown
Router-A_config_s1/0#^Z ！按ctrl + z 进入特权模式
第二步：查看配置
Router-A#show interface s1/1 ！查看接口状态
Serial1/0 is up, line protocol is down ！对端没有配置，所以协议是DOWN
Mode=Sync DCE Speed=64000 ！查看DCE
DTR=UP,DSR=UP,RTS=UP,CTS=DOWN,DCD=UP
Interface address is 192.168.1.1/24 ！查看IP 地址
MTU 1500 bytes, BW 64 kbit, DLY 2000 usec
Encapsulation prototol PPP, link check interval is 10 sec ！查看封装协议
Octets Received0, Octets Sent 0
Frames Received 0, Frames Sent 0, Link-check Frames Received0
Link-check Frames Sent 89, LoopBack times 0
Frames Discarded 0, Unknown Protocols Frames Received 0, Sent failuile 0
Link-check Timeout 0, Queue Error 0, Link Error 0,
60 second input rate 0 bits/sec, 0 packets/sec!
60 second output rate 0 bits/sec, 0 packets/sec!
0 packets input, 0 bytes, 8 unused_rx, 0 no buffer
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
8 packets output, 192 bytes, 0 unused_tx, 0 underruns
error:
0 clock, 0 grace
PowerQUICC SCC specific errors:
0 recv allocb mblk fail 0 recv no buffer
0 transmitter queue full 0 transmitter hwqueue_full
第三步：Router-B 的配置
Router>enable ！进入特权模式
Router #config ！进入全局配置模式
Router _config#hostname Router-B ！修改机器名
Router-B_config#username RouterA password digitalchinaA !设置帐号密码
Router-B_config#interface s1/0 ！进入接口模式
Router-B_config_s1/0#ip address 192.168.1.2 255.255.255.0 ！配置IP 地址
Router-B_config_s1/1#encapsulation PPP ！封装PPP 协议
Router-A_config_s1/0#ppp authentication pap ！设置验证方式
Router-A_config_s1/0#ppp pap sent-username RouterB digitalchinaB ！设置发送给对方验证的帐号密码
Router-B_config_s1/0#no shutdown
Router-B_config_s1/0#^Z ！按ctrl + z 进入特权模式
第四步：查看配置
Router-A#show interface s1/0 ！查看接口状态
Serial1/0 is up, line protocol is up ！接口和协议都是up
Mode=Sync DTE ！查看DTE
DTR=UP,DSR=UP,RTS=UP,CTS=DOWN,DCD=UP
Interface address is 192.168.1.2/24 ！查看IP 地址
MTU 1500 bytes, BW 64 kbit, DLY 2000 usec
Encapsulation prototol PPP, link check interval is 10 sec ！查看封装协议
Octets Received0, Octets Sent 0
Frames Received 0, Frames Sent 0, Link-check Frames Received0
Link-check Frames Sent 89, LoopBack times 0
Frames Discarded 0, Unknown Protocols Frames Received 0, Sent failuile 0
Link-check Timeout 0, Queue Error 0, Link Error 0,
60 second input rate 0 bits/sec, 0 packets/sec!
60 second output rate 0 bits/sec, 0 packets/sec!
0 packets input, 0 bytes, 8 unused_rx, 0 no buffer
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
8 packets output, 192 bytes, 0 unused_tx, 0 underruns
error:
0 clock, 0 grace
PowerQUICC SCC specific errors:
0 recv allocb mblk fail 0 recv no buffer
0 transmitter queue full 0 transmitter hwqueue_full
第五步：测试连通性
Router-A#ping 192.168.1.2
PING 192.168.1.2 (192.168.1.2): 56 data bytes
!!!!!
--- 192.168.1.2 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 20/22/30 ms