ccna學(xué)習(xí)模擬器課件及icnd210s08l

1、 LAN 延伸到 WAN使用 PPP 建立點(diǎn)對(duì)點(diǎn)的 WAN 連接 典型的 WAN 封裝協(xié)議PPP 概述PPP 可以使用 NCP 傳輸來(lái)自多種協(xié)議簇的數(shù)據(jù)包。PPP 使用 LCP 控制多個(gè)鏈路選項(xiàng)的設(shè)置。 PPP 會(huì)話建立PPP 會(huì)話建立：鏈路建立階段身份驗(yàn)證階段（可選）兩種 PPP 身份認(rèn)證協(xié)議：PAP 和 CHAP網(wǎng)絡(luò)層協(xié)議階段PPP 身份驗(yàn)證協(xié)議：PAP口令以明文發(fā)送對(duì)等點(diǎn)控制嘗試PPP 身份驗(yàn)證協(xié)議：CHAP這是 Santa Cruz 路由器對(duì) HQ 路由器進(jìn)行身份驗(yàn)證的示例。通過(guò)鏈路發(fā)送哈希值（并非實(shí)際的口令）。 本地路由器或外部服務(wù)器控制身份驗(yàn)證嘗試。 配置 PPP 和身份驗(yàn)證概述配

2、置 PPP 和身份驗(yàn)證RouterX(config-if)# encapsulation ppp啟用 PPP 封裝RouterX(config)# hostname name給路由器指定主機(jī)名RouterX(config)# username name password password標(biāo)識(shí)遠(yuǎn)程路由器的用戶名和口令 RouterX(config-if)# ppp authenticationchap | chap pap | pap chap | pap啟用 PAP 或 CHAP 身份驗(yàn)證PPP 和 CHAP 配置示例hostname RouterXusername RouterY passw

3、ord sameone!int serial 0ip address 10.0.1.1 255.255.255.0encapsulation pppppp authentication chaphostname RouterYusername RouterX password sameone!int serial 0ip address 10.0.1.2 255.255.255.0encapsulation pppppp authentication chap檢驗(yàn) PPP 封裝配置RouterX# show interface s0Serial0 is up, line protocol is

4、 up Hardware is HD64570 Internet address is 10.140.1.2/24 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LCP Open Open: IPCP, CDPCP Last input 00:00:05, output 00:00:05, output hang never Last clearing of show interf

5、ace counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 38021 packets input, 5656110 bytes, 0 no buffer Received 23488 broadcasts, 0 runts, 0 giants, 0 throttles 0 in

6、put errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 38097 packets output, 2135697 bytes, 0 underruns 0 output errors, 0 collisions, 6045 interface resets 0 output buffer failures, 0 output buffers swapped out 482 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up檢驗(yàn) PPP 身份驗(yàn)證RouterX# debug p

7、pp authentication4d20h: %LINK-3-UPDOWN: Interface Serial0, changed state to up4d20h: Se0 PPP: Treating connection as a dedicated line4d20h: Se0 PPP: Phase is AUTHENTICATING, by both4d20h: Se0 CHAP: O CHALLENGE id 2 len 28 from ”left4d20h: Se0 CHAP: I CHALLENGE id 3 len 28 from ”right4d20h: Se0 CHAP:

8、 O RESPONSE id 3 len 28 from ”left4d20h: Se0 CHAP: I RESPONSE id 2 len 28 from ”right4d20h: Se0 CHAP: O SUCCESS id 2 len 44d20h: Se0 CHAP: I SUCCESS id 3 len 44d20h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to updebug ppp authentication 命令可顯示成功的 CHAP 輸出檢驗(yàn) PPP 協(xié)商RouterX#

9、 debug ppp negotiationPPP protocol negotiation debugging is onRouterX#*Mar 1 00:06:36.645: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up*Mar 1 00:06:36.661: BR0:1 PPP: Treating connection as a callin*Mar 1 00:06:36.665: BR0:1 PPP: Phase is ESTABLISHING, Passive Open*Mar 1 00:06:36.669: BR0:1

10、 LCP: State is Listen*Mar 1 00:06:37.034: BR0:1 LCP: I CONFREQ Listen id 7 len 17*Mar 1 00:06:37.038: BR0:1 LCP: AuthProto PAP (0 x0304C023)*Mar 1 00:06:37.042: BR0:1 LCP: MagicNumber 0 x507A214D (0 x0506507A214D)*Mar 1 00:06:37.046: BR0:1 LCP: Callback 0 (0 x0D0300)*Mar 1 00:06:37.054: BR0:1 LCP: O

11、 CONFREQ Listen id 4 len 15*Mar 1 00:06:37.058: BR0:1 LCP: AuthProto CHAP (0 x0305C22305)*Mar 1 00:06:37.062: BR0:1 LCP: MagicNumber 0 x1081E7E1 (0 x05061081E7E1)*Mar 1 00:06:37.066: BR0:1 LCP: O CONFREJ Listen id 7 len 7*Mar 1 00:06:37.070: BR0:1 LCP: Callback 0 (0 x0D0300) *Mar 1 00:06:37.098: BR0

12、:1 LCP: I CONFACK REQsent id 4 len 15*Mar 1 00:06:37.102: BR0:1 LCP: AuthProto CHAP (0 x0305C22305)*Mar 1 00:06:37.106: BR0:1 LCP: MagicNumber 0 x1081E7E1 (0 x05061081E7E1)*Mar 1 00:06:37.114: BR0:1 LCP: I CONFREQ ACKrcvd id 8 len 14*Mar 1 00:06:37.117: BR0:1 LCP: AuthProto PAP (0 x0304C023)*Mar 1 00:06:37.121: BR0:1 LCP: MagicNumber 0 x507A214D (0 x0506507A214D) 總結(jié)PPP