PPP封装PAP验证配置一、实验目的1.掌握PAP验证配置2.理解验证过程二、实验描述基于安全的考虑，需要路由器双方验证通过后才能建立连接三、实验拓扑实验步骤第1步：接口地址配置R1:S1/0:192.168.1.1255.255.255.0R2:S1/0:192.168.1.2255.255.255.0第2步：R1的配置R1#configtR1(config)#ints1/1R1(config-if)#ipaddress192.168.1.1255.255.255.0R1(config-if)#noshutR1(config-if)#exitR1(config)#usernameR2pass123设置账号和密码R1(config)#ints1/1R1(config-if)#encapsulationppp封装PPPR1(config-if)#pppauthenticationpap选择认证方式R1(config-if)#ppppapsent-usernameR1password123设置发送给对方的账号和密码R1(config-if)#clockrate9600R1(config-if)#exit第3步：查看接口配置R1#showinterfaceserial1/1Serial1/0isup,lineprotocolisdown(disabled)对端没有设置PPP所以不可用HardwareisHD64570Internetaddressis192.168.1.1/24MTU1500bytes,BW128Kbit,DLY20000usec,rely255/255,load1/255EncapsulationPPP,loopbacknotset,keepaliveset(10sec)LCPClosedClosed:LEXCP,BRIDGECP,IPCP,CCP,CDPCP,LLC2,BACPLastinputnever,outputnever,outputhangnever第4步：R2的配置R2>enR2#configtR2(config)#usernameR1password123R2(config)#ints1/0R2(config-if)#ipaddress192.168.1.2255.255.255.0R2(config-if)#encapsulationpppR2(config-if)#pppauthenticationpapR2(config-if)#ppppapsent-usernameR2password123R2(config-if)#noshut%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial1/0,changedstatetoupR2(config-if)#exitend第5步：查看接口配置R2#showinterfaceserial1/0Serial1/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis192.168.1.2/24MTU1500bytes,BW128Kbit,DLY20000usec,rely255/255,load1/255EncapsulationPPP,loopbacknotset,keepaliveset(10sec)LCPOpenOpen:IPCP,CDPCPLastinputnever,outputnever,outputhangneverLastclearingof"showinterface"countersnever省略第6步：测试连通性R2#ping192.168.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto192.168.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=31/31/32msR2#六、注意事项1.账号与密码一定要交叉对应，发送的账号密码要和对方的账号数据库中的账号密码对应2.不要忘记配置DCE端的时钟频率