通过对PPP协议的了解,我们发现,PPP身份认证是一个非常重要的内容。那么在认证过程中,也分为了不同的阶段。那么这里我们就来看看具体的内容吧。先看一下使用的拓扑:
PAP双向身份认证
R1配置如下:
- config t
- hostname R1
- username R1 password komy
- interface s0/0/0
- ip address 192.168.1.2 255.255.255.252
- encapsulation ppp
- ppp authentication pap
- ppp pap sent-username R2 password komy
- no shutdown
R2配置如下:
- config t
- hostname R2
- username R2 password komy
- int s0/0/0
- clock rate 4000000
- ip address 192.168.1.1 255.255.255.252
- encapsulation ppp
- ppp authentication pap
- ppp pap sent-username R1 password komy
- no shutdown
PAP单向身份认证
R1配置如下(被认证方):
- config t
- hostname R1
- interface s0/0/0
- ip address 192.168.1.2 255.255.255.252
- encapsulation ppp
- ppp pap sent-username R2 password komy
- no shutdown
R2配置如下(主认证方):
- config t
- hostname R2
- username R2 password komy
- int s0/0/0
- clock rate 4000000
- ip address 192.168.1.1 255.255.255.252
- encapsulation ppp
- ppp authentication pap
- no shutdown
CHAP双向身份认证
- config t
- hostname R1
- username R2 password komy
- int s0/0/0
- ip address 192.168.1.2 255.255.255.252
- encapsulation ppp
- ppp authentication chap
- no shutdown
R2:
- config t
- hostname R2
- username R1 password komy
- int s0/0/0
- clock rate 4000000
- ip address 192.168.1.1 255.255.255.252
- encapsulation ppp
- ppp authentication chap
- no shutdown
CHAP单向身份认证
R1(CHAP被认证方):
- config t
- hostname R1
- username R2 password komy
- int s0/0/0
- ip address 192.168.1.2 255.255.255.252
- encapsulation ppp
- no shutdown
R2(CHAP主认证方):
- config t
- hostname R2
- username R1 password komy
- int s0/0/0
- clock rate 4000000
- ip address 192.168.1.1 255.255.255.252
- encapsulation ppp
- ppp authentication chap
- no shutdown
来自:http://hi.baidu.com/51cmdshell