首页 > 学院 > 网络通信 > 正文

PPP认证、DDR和Multilink

2019-11-04 20:50:39
字体:
来源:转载
供稿:网友

  在本节的实验中,将对PPP认证、DDR和Multilink进行配置,更深入地了解ISDN和拨号网络的配置技能。
  
  1.实验目的
  
  通过本实验,读者可以把握以下技能:
  配置PPP CHAP认证;
  配置dialer map;
  配置DDR
  配置Multilink;
  查看和监测有关信息。
  
  2.设备需求
  
  本实验的设备需求与实验1完全相同,请参见实验1的相关内容。
  
  3.拓扑结构及配置说明
  
  本实验的拓扑结构如图7-2所示,R1和R2路由器分别连接1条ISDN BRI线路。
  为达到配置DDR的目的,在R1和R2上分别创建1个回送接口(L0)。
  各路由器BRI接口、L0接口的ip地址和所连接线路的ISDN号码见图7-2中的标注。
  
PPP认证、DDR和Multilink

  实验要求配置R1和R2,实现从10.1.1.0/24网段到10.1.2.0/24网段的连通,同时提供拨号连接的安全性,并使用相应命令实现R1和R2之间的128kbit/s的连接带宽。
  
  4.实验配置及监测结果
  
  实验中综合使用了DDR、PPP认证和PPP Multilink技术,让我们来看如何配置路由器以满足实验的要求。
  配置清单7-2是R1和R2的具体配置。
  
  配置清单7-2配置DDR、PPP认证和ppp Multilink
  
  第1段:R1的配置清单
  R1#sh run
  Building configuration...
  
  Current configuration : 2752 bytes
  !
  version 12.1
  service timestamps debug uptime
  service timestamps log uptime
  no service passWord-encryption
  !
  hostname R1
  username R2 password 0 cisco
  !
  ip subnet-zero
  no ip domain-lookup
  isdn switch-type basic-iietS
  !
  interface Loopback0
   ip address 10.1.1.1255.255.255.0
  
  interface BRIO
   ip address 192.168.1.1255.255.255.0
   encapsuSation ppp
   dialer idle-timeout 300
   dialer map ip 192.168.1.2 name R2 broadcast 80000002
   dialer load-threshold 128
   dialer-group 1
   no cdp enable
   ppp authentication chap
   PPP multilink
  !
  ip classless
  ip route 10.1.2.0 255.255.255.0 192.168.1.2
  !
  dialer-list 1 PRotocol ip permit
  line con 0
   transport input none
  line aux 0
   transport input all
  line vty 0 4
   login
  !
  end
  
  第2段:R2的配置清单
  R2#sh run
  Building configuration...
  
  Current configuration : 1086 bytes
  !
  version 12.1
  service timestamps debug uptime
  service timestamps log uptime
  no service password-encryption
  service udp-small-servers
  service tcp-small-servers
  !
  hostname R2
  !
  useriiame R1 password 0 cisco
  !
  ip subnet-zero
  no ip finger
  !
  isdn switch-type basic"net3
  !
  interface Loopback0
   ip address 10.1.2.1255.255.255.0
  !
  interface BRIO
   ip address 192.168.1.2 255.255.255.0
   encapsiiSation ppp
   dialer idle-timeout 300
   dialer map ip 192.168.1.1 name Rl broadcast 80000001
   dialer load-threshold 128
   dialer-group 1
   no cdp enable
   ppp authentication chap
   ppp multilink
  !
  ip classless
  ip route 10.1.1.0 255.255.255.0 192.168.1.1
  !
  dialer-list 1 protocol ip permit
  !
  line con 0
   transport input none
  line aux 0
   transport input all
  line vty 0 4
   login
  !
  end
  第3段:监测配置结果
  R1#debug ppp authentication
  PPP authentication debugging is on
  R1#ping 10.1.2.1
  
  Type escape sequence to abort.
  Sending 5, 100-byte ICMP Echos to 10.1.2.1, timeout is 2 seconds:
  03:17:15: %LINK-3-UPDOWN: Interface BRIO:1, changed state to up
  03:17:15: BRO:1 PPP: Treating connection as a callout
  03:17:15: %ISDN-6-CONNECT: Interface BRIO:1 is now connected to 80000002
  03:17:17:BRIO:1 CHAP:O CHALLENGE id 5 len 23 from"R1"
  03:17:17:BRIO:1 CHAP:I CHALLENGE id 2 len 23 from"R2"
  03:17:17:BRIO:1 CHAP:O RESPONSE id 2 len 23 from"R1"
  03:17:17:BRIO:1 CHAP:I SUCCESS id 2 len 4
  03:17:17:BRIO:1 CHAP:I RESPONSE id 5 len 23 from"R2"
  03:17:17:BRIO:1 CHAP:O SUCCESS id 5 len 4
  Success rate is 60 percent (3/5), round-trip min/avg/max == 36/37/40 ms
  03:17:18: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRIO:1, changed state to up
  R1#ping 10.1.2.1
  
  Type escape sequence to abort.
  Sending 5, 100-byte ICMP Echos to 10.1.2.1, timeout is 2 seconds:
  !!!!!
  Success rate is 100 percent (5/5), round-trip min/avg/max = 36/36/40 ms
  R1#sh dialer map
  R1#debug isdn q921
  ISDN Q921 packets debugging is on
  03:22:38:ISDN BRO:RX<- RRp sapi=0 tei=66 nr=0
  03:22:38:ISDN BRO:TX<- RRf sapi=0 tei=66 nr=0
  03:22:38:ISDN BRO:RX<- RRp sapi=0 tei=70 nr=0
  03:22:38:ISDN BRO:RX<- RRf sapi=0 tei=70 nr=0
  03:22:48: ISDN BRO:TX-> RRpsapi=O tei=66 nr=0
  03:22:48: ISDN BRO: RX <- RRp sapi=0 tei=66 nr=0
  03:22:48: ISDN BRO:TX-> RRfsapi=0 tei=66 nr=0
  03:22:48: ISDN BRO: RX<- RRfsapi=0 tei=66 nr=0
  03:22:48: ISDN BRO: RX <- RRp sapi=0 tei=70 nr=0
  03:22:48: ISDN BRO: RX <- RRf sapi=0 tei=70 nr=0
  R1#debug isdn q931
  ISDN Q931 packets debugging is on
  R1#ping 10.1.2.1
  Type escape sequence to abort.
  Sending 5, 100-byte ICMP Echos to 10.1.2.1, timeout is 2 seconds:
  03:24:33: ISDN BRO: TX -> SETUP pd = 8 callref = 0x04
  03:24:33:   Bearer Capability i=0x8890
  03:24:33:   Channel ID i=0x83
  03:24:33: ISDN BRO: RX <- SETUP_ACK pd=8 callref=0x84
  03:24:33:   Channel ID i=0x89
  03:24:33: ISDN BRO: RX <- CALL_PROC pd=8 callref=0x84
  03:24:33: ISDN   RX <- SETUP pd=8 callref=0x01
  03:24:33: %LINK-3-UPDOWN: Interface BRIO: 1, changed state to up
  03:24:33: %ISDN-6-CONNECT: Interface BRIO:2 is now connected to 80000002
  03:24:34: ISDN BRO: RX<- RELEASE pd=8 callref=0x01
  03:24:34:   Cause i=Ox829A-Non-selected user clearing
  03:24:34: ISDN BRO: TX-> RELEASE_COMP pd=8 callref=0x81
  03:24:34: %ISDN-6-CONNECT: Interface BRIO: 1 is now connected to 80000002
  03:24:34: ISDN BRO: RX <- RELEASE_COMP pd=8 callref =OxO1!!!
  Success rate is 60 percent (3/5), round-trip min/avg/max == 36/38/40 ms
  R1#
  03:24:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRIO: 1, changed state to up
  03:24:38: ISDN BRO: TX -> SETUP pd == 8 callref = 0x05
  03:24:38:   Bearer Capability i=0x8890
  03:24:38:   Channel ID i=0x83
  
  R2#ping 10.1.1.1
  
  Type escape sequence to abort.
  Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
  !!!!!
  Success rate is 100 percent (5/5), round-trip min/avg/max = 40/114/412 ms
  我们采用把R1和R2的同类配置同时列出并讲解的方法,以方便读者更好地理解配置。实验1中己经配置过的项目不再是我们讲解的重点。
  (1)配置用户名和口令。
  R1:USernam R2 password 0 Cisco
  R2:USemame R1 password 0 cisco
  在R1上定义的用户名为R2,即拨号链路对端路由器名(由hostname所


发表评论 共有条评论
用户名: 密码:
验证码: 匿名发表