实验要求

1、R1 和 R2 使用 PPP 链路直连，R2和R3 把2条 PPP 链路捆绑为 PPP MP 直连
2、按照图示配置 IP 地址
3、R2对R1的PPP进行单向 chap 验证
4、R2和R3的PPP进行双向 chap 验证
 

配置

1、如图，R1 和 R2 已使用 PPP 链路直连

2、R2 和 R3上配置 PPP MP

# 步骤 1：在 R2 上创建 MP-GROUP 口
# 步骤 2：把 S3/0/1 和 S4/0/0 加入到上一步创建的 MP-GROUP口
[AR2]interface Mp-group0/0/0
[AR2]int s3/0/1
[AR2-Serial3/0/1]ppp mp Mp-group0/0/0

[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp mp Mp-group0/0/0

[AR3]int Mp-group0/0/0
[AR3-Mp-group0/0/0]int s3/0/0
[AR3-Serial3/0/0]ppp mp Mp-group0/0/0

[AR3-Serial3/0/0]int s3/0/1
[AR3-Serial3/0/1]ppp mp Mp-group0/0/0

3、配置IP地址

[AR1]int s3/0/0
[AR1-Serial3/0/0]ip address 192.168.1.1 24

[AR2]int s3/0/0
[AR2-Serial3/0/0]ip address 192.168.1.2 24

# AR2 和 AR3 的MP-Group口上配置IP地址 
[AR2]interface Mp-group0/0/0
[AR2-Mp-group0/0/0]ip address 192.168.2.2 24
[AR3]interface Mp-group0/0/0
[AR3-Mp-group0/0/0]ip address 192.168.2.3 24

测试AR1和AR2之间是否连通 

4、R2对R1的PPP进行单向 chap 验证

在AR2的Serial3/0/0口上设置验证类型

主验证方：配置用户列表及验证方式
[AR2]aaa
[AR2-aaa]local-user zz password cipher 123
Info: Add a new user.

[AR2-aaa]local-user zz service-type ppp
[AR2-aaa]int s3/0/0
[AR2-Serial3/0/0]ppp authentication-mode chap     # 设置验证类型

在AR1的Serial3/0/0口上配置用于验证的用户名和密码

[AR1]int s3/0/0
[AR1-Serial3/0/0]ppp chap user zz
[AR1-Serial3/0/0]ppp chap password cipher 123

5、R2和R3的PPP进行双向 chap 验证

# 先作为主认证方
[AR2]aaa
[AR2-aaa]local-user zz password cipher 123
[AR2-aaa]local-user zz service-type ppp
[AR2-aaa]int s3/0/1
[AR2-Serial3/0/1]ppp authentication-mode chap
[AR2-Serial3/0/1]link-protocol ppp 
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp authentication-mode chap
[AR2-Serial4/0/0]link-protocol ppp

# 后作为被认证方
[AR2]int s3/0/1
[AR2-Serial3/0/1]ppp chap user zz
[AR2-Serial3/0/1]ppp chap password cipher 123
[AR2-Serial3/0/1]int s4/0/0
[AR2-Serial4/0/0]ppp chap user zz
[AR2-Serial4/0/0]ppp chap password cipher 123

# 先作为被认证方
[AR3]int s3/0/0
[AR3-Serial3/0/0]ppp chap user zz
[AR3-Serial3/0/0]ppp chap password cipher 123
[AR3-Serial3/0/0]int s3/0/1
[AR3-Serial3/0/1]ppp chap user zz
[AR3-Serial3/0/1]ppp chap password cipher 123

# 后作为认证方
[AR3]aaa
[AR3-aaa]local-user zz password cipher 123
[AR3-aaa]local-user zz service-type ppp
[AR3-aaa]int s3/0/0
[AR3-Serial3/0/0]ppp authentication-mode chap 
[AR3-Serial3/0/0]link-protocol ppp
[AR3-Serial3/0/0]int s3/0/1
[AR3-Serial3/0/1]ppp authentication-mode chap
[AR3-Serial3/0/1]link-protocol ppp