实验17路由器接口PPP协议封装和PAPCHAP验证配置(改写)pdf

实验19路由器接口PPP协议封装和PAP、CHAP验证配置【背景知识】教材1.7.4及4.4.4-4.4.5内容。掌握PPP协议的封装结构及PAP、CHAP的认证原理和认证过程，掌握PAP和CHAP认证的区别。PAPCHAP认证时由用户发起认证时由服务器发起用户名、密码明文传送用MD5算法加密传送次数无限，直至认证成功或线路关闭为止次数有限（一般为3次）认证通过后不再进行验证认证通过后定时再验证安全性低安全性很高【实验拓扑】图8-23给出了实验线路连接，实验时使用CiscoPacketTracer5.2完成拓扑结构搭建。注意连接线路时，不要使用PacketTracer中的自动选择线缆类型方式进行连接，而要自己选择合适的线缆进行连接，否则拓扑连接容易出错。图8-23实验19线路连接图【实验内容】(1)选择两台C2811路由器，分别关闭电源后添加WIC-2T模块，添加位置为插槽0/接口适配器0（提示：在4个插槽中右下角的位置）。开启电源之后使用Serial电缆将两台路由器的Serial0/0/0接口进行连接，连接时使得C2811B为DCE端、C2811A为DTE端，即选择带时钟标记的串行线先连C2811B，然后再连C2811A。电源开关，用鼠标点击图8.22WIC-2T模块安装位置可开关【提示1】图8.22所示界面，可以单击某台路由器的图标，然后在弹出的框中选择“Physical”选项卡，接着在左侧一栏中选择WIC-2T，最后按住鼠标左键不变拖动到对应的适配器即可。【提示2】在选择线缆时，用串行线旁边带时钟符号的线先连接C2811B，那么C2811B即为DCE端，线另外一头所连接的路由器C2811A就是DTE；反之，亦成立。1(2)参阅教材4.4.4中内容，配置C2811A的Serial0/0/0接口的IP地址192.168.1.1/24和二层封装协议为PPP。配置C2811B的Serial0/0/0接口的IP地址192.168.1.2/24和二层封装协议为PPP。以下为C2811A的配置，配置如下：RouterenableRouter#configtRouter(config)#hostnameLuoC2811A//简写hoLuoC2811ALuoC2811A(config)#interfaceserial0/0/0//简写ints0/0/0LuoC2811A(config-if)#ipaddress192.168.1.1255.255.255.0//简写ipaddrLuoC2811A(config-if)#encapsulationppp//简写encppLuoC2811A(config-if)#noshutdown//简写noshut【提示】C2811B的配置与C2811A的配置类似，此处省略。(3)完成以上配置之后，分别在两台路由器上使用showinterfaceSerial0/0/0查看接口信息，注意接口状态（指up还是down）、接口封装协议。在路由器上相互ping对方IP地址，看能否ping通，并解释其原因。LuoC2811A#showinterfaceserial0/0/0//查看接口状态信息Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis192.168.1.1/24MTU1500bytes,BW1544Kbit,DLY20000usec,reliability255/255,txload1/255,rxload1/255EncapsulationPPP,loopbacknotset,keepaliveset(10sec)LCPOpenOpen:IPCP,CDPCPLastinputnever,outputnever,outputhangneverLastclearingofshowinterfacecountersneverInputqueue:0/75/0(size/max/drops);Totaloutputdrops:0Queueingstrategy:weightedfairOutputqueue:0/1000/64/0(size/maxtotal/threshold/drops)Conversations0/0/256(active/maxactive/maxtotal)ReservedConversations0/0(allocated/maxallocated)AvailableBandwidth1158kilobits/sec5minuteinputrate0bits/sec,0packets/sec5minuteoutputrate0bits/sec,0packets/sec0packetsinput,0bytes,0nobufferReceived0broadcasts,0runts,0giants,0throttles0inputerrors,0CRC,0frame,0overrun,0ignored,0abort0packetsoutput,0bytes,0underruns0outputerrors,0collisions,1interfaceresets0outputbufferfailures,0outputbuffersswappedout20carriertransitionsDCD=upDSR=upDTR=upRTS=upCTS=upLuoC2811A#ping192.168.1.2//ping对方的IP地址Typeescapesequencetoabort.Sending5,100-byteICMPEchosto192.168.1.2,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=1/1/2ms【提示1】注意红色框中信息，两个up的代表的含义和封装信息。【提示2】此处显示为ping通。【提示3】C2811B的配置与C2811A的配置类似，此处省略。【提示4】理论上，如果还没有配置时钟频率，此时两台路由器的s0/0/0端口是不能相互ping通的。现在不配置时钟频率也能相互ping通，是由于模拟器缺省情况下就给串行端口配置了时钟频率。大家日后在配置实际的路由器时，要注意此一点。(4)为查看接口是DCE还是DTE类型，用showcontrollersserial0/0/0命令。根据查看到的接口类型，在DCE接口上配置时钟频率。如若物理连线正确的，C2811B上的串行口0/0/0属于DCE，应该配置接口时钟频率。LuoC2811B#showcontrollersserial0/0/0//查看是DCE还是DTE接口InterfaceSerial0/0/0HardwareisPowerQUICCMPC860DCEV.35,clockrate2000000idbat0x81081AC4,driverdatastructureat0x81084AC0SCCRegisters:General[GSMR]=0x2:0x00000000,Protocol-specific[PSMR]=0x8Events[SCCE]=0x0000,Mask[SCCM]=0x0000,Status[SCCS]=0x00TransmitonDemand[TODR]=0x0,DataSync[DSR]=0x7E7EInterruptRegisters:Config[CICR]=0x00367F80,Pending[CIPR]=0x0000C000Mask[CIMR]=0x00200000,In-srv[CISR]=0x00000000Commandregister[CR]=0x580PortA[PADIR]=0x1030,[PAPAR]=0xFFFF[PAODR]=0x0010,[PADAT]=0xCBFFPortB[PBDIR]=0x09C0F,[PBPAR]=0x0800E[PBODR]=0x00000,[PBDAT]=0x3FFFDPortC[PCDIR]=0x00C,[PCPAR]=0x200[PCSO]=0xC20,[PCDAT]=0xDF2,[PCINT]=0x00FReceiveRingrmd(68012830):status9000length60Caddress3B6DAC4rmd(68012838):statusB000length60Caddress3B6D444TransmitRing3tmd(680128B0):status0length0address0tmd(680128B8):status0length0address0tmd(680128C0):status0length0address0tmd(680128C8):status0length0address0tmd(680128D0):status0length0address0tmd(680128D8):status0length0address0tmd(680128E0):status0length0address0tmd(680128E8):status0length0address0tmd(680128F0):status0length0address0tmd(680128F8):status0length0address0tmd(68012900):status0length0address0tmd(68012908):status0length0address0tmd(68012910):status0length0address0tmd(68012918):status0length0address0tmd(68012920):status0length0address0tmd(68012928):status2000length0address0tx_limited=1(2)SCCGENERALPARAMETERRAM(at0x68013C00)RxBDBase[RBASE]=0x2830,FnCode[RFCR]=0x18TxBDBase[TBASE]=0x28B0,FnCode[TFCR]=0x18MaxRxBuffLen[MRBLR]=1548RxState[RSTATE]=0x0,BDPtr[RBPTR]=0x2830TxState[TSTATE]=0x4000,BDPtr[TBPTR]=0x28B0SCCHDLCPARAMETERRAM(at0x68013C38)LuoC2811A#showcontrollersserial0/0/0//查看是DCE还是DTE接口InterfaceSerial0/0/0HardwareisPowerQUICCMPC860DTEV.35TXandRXclocksdetectedidbat0x81081AC4,driverdatastructureat0x81084AC0SCCRegisters:General[GSMR]=0x2:0x00000000,Protocol-specific[PSMR]=0x8Events[SCCE]=0x0000,Mask[SCCM]=0x0000,Status[SCCS]=0x00TransmitonDemand[TODR]=0x0,DataSync[DSR]=0x7E7EInterruptRegisters:Config[CICR]=0x00367F80,Pending[CIPR]=0x0000C000Mask[CIMR]=0x00200000,In-srv[CISR]=0x00000000Commandregister[CR]=0x580PortA[PADIR]=0x1030,[PAPAR]=0xFFFF[PAODR]=0x0010,[PADAT]=0xCBFFPortB[PBDIR]=0x09C0F,[PBPAR]=0