CCNAPPP協(xié)議封裝PPT課件

1、Configuring Serial Point-To-Point EncapsulationLAN Extension into a WAN第1頁/共17頁Outline Overview HDLC Encapsulation Configuration PPP Layered Architecture PPP Configuration PPP Session Establishment PPP Authentication Protocols PPP Authentication Configuration Serial Encapsulation Configuration Verif

2、ication PPP Authentication Configuration Troubleshooting Summary第2頁/共17頁HDLC Frame Format 使用一個私有的區(qū)域來支持多協(xié)議的環(huán)境. 只支持單協(xié)議環(huán)境. 不支持認(rèn)證 優(yōu)點:簡單,易于配置第3頁/共17頁Configuring HDLC EncapsulationRouter(config-if)#encapsulation hdlc Enables HDLC encapsulation Uses the default encapsulation on synchronous serial interface

3、s第4頁/共17頁An Overview of PPP PPP can carry packets from several protocol suites using NCP. 負(fù)責(zé)對上層網(wǎng)絡(luò)協(xié)議提供支持(TCP/IP,IPX,AppleTalk) PPP controls the setup of several link options using LCP. 負(fù)責(zé)對下層物理鏈路進行建立控制.上層NCP(Network Control Protocol)下層LCP(Link Control Protocol)第5頁/共17頁PPP Session EstablishmentPPP sess

4、ion establishment:1. Link establishment 階段2. Authentication 階段(可選)Two PPP authentication protocols: PAP and CHAP3. Network layer protocol 階段第6頁/共17頁PPP Authentication Protocols: PAP Passwords sent in plaintext第7頁/共17頁PPP Authentication Protocols: CHAP This is an example of the Santa Cruz router auth

5、enticating to the HQ router. Hash values, not actual passwords, are sent across the link. The local router or external server is in control of authentication attempts. 第8頁/共17頁Configuring PPP and Authentication Overview第9頁/共17頁Configuring PPP and AuthenticationRouterX(config-if)# encapsulation ppp E

6、nables PPP encapsulationRouterX(config)# hostname name Assigns a hostname to your routerRouterX(config)# username name password password Identifies the username and password of remote router RouterX(config-if)# ppp authenticationchap | chap pap | pap chap | pap Enables PAP or CHAP authentication第10頁

7、/共17頁PPP and CHAP Configuration Examplehostname RouterXusername RouterY password sameone!int serial 0 encapsulation ppp ppp authentication chaphostname RouterYusername RouterX password sameone!int serial 0 encapsulation ppp ppp authentication chap第11頁/共17頁Verifying the PPP Encapsulation Configuratio

8、nRouterX# show interface s0Serial0 is up, line protocol is up Hardware is HD64570 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input 00:00:05, output 00:00:05, output hang never Last

9、 clearing of show interface counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 38021 packets input, 5656110 bytes, 0 no buffer Received 23488 broadcasts, 0 runts, 0

10、giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 38097 packets output, 2135697 bytes, 0 underruns 0 output errors, 0 collisions, 6045 interface resets 0 output buffer failures, 0 output buffers swapped out 482 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=upNCP

11、第12頁/共17頁LAB 1:PAP(Passsword Authentication Protocol)Step1:為對方創(chuàng)建賬號/密碼 R1(config)# Username BBB password 222 R2(config)# Username AAA password 222Step2:指定認(rèn)證方式 R1(config)#in s1/0 encap PPP ppp authentication pap no shut R2(config)#in s1/0 encap PPP ppp authentication pap no shutStep3:將對方為自己創(chuàng)建的賬號/密碼發(fā)送給

12、對方檢驗 R1(config-if)#ppp pap sent-username AAA password 111 R2(config-if)#ppp pap sent-username BBB password 222Step4:觀察認(rèn)證過程 #debug ppp authentication 第13頁/共17頁LAB 2:CHAP (Challenge Handshake Authentication Protocol)Step1:為對方創(chuàng)建賬號/密碼 R1(config)# Username R2 password AAA R2(config)# Username R1 password

13、 AAAStep2:指定認(rèn)證方式 R1(config)#in s1/0 ppp authentication chap no shut R2(config)#in s1/0 ppp authentication chap no shutStep3:觀察認(rèn)證過程 #debug ppp authentication第14頁/共17頁Verifying PPP AuthenticationRouterX# debug ppp authentication4d20h: %LINK-3-UPDOWN: Interface Serial0, changed state to up4d20h: Se0 PP

14、P: Treating connection as a dedicated line4d20h: Se0 PPP: Phase is AUTHENTICATING, by both4d20h: Se0 CHAP: O CHALLENGE id 2 len 28 from ”left4d20h: Se0 CHAP: I CHALLENGE id 3 len 28 from ”right4d20h: Se0 CHAP: O RESPONSE id 3 len 28 from ”left4d20h: Se0 CHAP: I RESPONSE id 2 len 28 from ”right4d20h:

15、 Se0 CHAP: O SUCCESS id 2 len 44d20h: Se0 CHAP: I SUCCESS id 3 len 44d20h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to upThe debug ppp authentication command shows successful CHAP output第15頁/共17頁Summary PPP is a common Layer 2 protocol for the WAN. There are two components of PPP: LCP negotiates the connection and NCP encapsulates traffic. You can configure PPP