"Experiment Name"
PPP PAP Certification
"Experimental Purpose"
Mastering the process and configuration of PPP PAP certification
"Background description"
You are the company's network administrator, the company in order to meet the growing business needs, the application of a dedicated line access, your customer
The client router authenticates with the ISP when it negotiates the link, configures the router to ensure that the link is established, and considers its security
Of
"Demand Analysis"
Security validation is ensured during link negotiation. The user name and password are transmitted in clear text when the link is negotiated.
"Experimental Topology"
Fig. 9-2 Experimental topological diagram
"Pre-knowledge"
Router basic configuration knowledge, PPP PAP knowledge
"Experimental Equipment"
Router (with serial port) 2 units
v.35 Cable (DTE/DCE) 1 pair
"Experimental principle"
The PPP protocol is located at the data link layer of the OSI seven layer model, and the PPP protocol is divided into two sub-layers according to function: LCP,
Ncp. LCP is mainly responsible for the negotiation, establishment, callback, authentication, data compression, multilink bundling and other functions of the link.
The NCP is primarily responsible for negotiating with upper-level protocols to provide services for network-layer protocols.
The authentication function of PPP refers to the authentication of the password in the process of establishing the PPP link, verifying that by establishing the connection,
Verify that the link is not removed by removing it.
The PPP protocol supports two authentication methods, PAP and CHAP. PAP (Password authentication Protocol,
Password Authentication protocol) refers to verifying that both parties complete the verification process through two handshakes, which is a
A method for authenticating a user on a Point protocol server. The authentication request is initiated by the authenticated party, which contains the validated
User name and password. A reply is made after validation by the verifier, either through validation or validation failure. During the authentication process, the user name and secret
The code is transmitted on the link in clear text mode.
"Experimental Steps"
First step: Router basic configuration
Router (config) #hostname a
A (config) #interface serial 2/0
A (config-if) #ip address 172.28.1.1 255.255.255.0
A (config-if) # Encapsulation PPP
A (config) #hostname b
B (config) #interface serial 2/0
B (config-if) #ip address 172.28.2.2 255.255.255.0
B (config-if) #encapsulation PPP
Step Two: Configure PAP authentication
A (config) #interface serial 2/0
A (config-if) #ppp pap sent-username a password 0 123
B (config) #username RouterA password 123
B (config) #interface serial 2/0
B (config-if) #ppp authentication pap
Step three: Verify PAP Certification
A#show Interfaces Serial 2/0
Use the Debug PPP authentication command to verify the configuration.
B#debug PPP Authentication
B#conf T
Enter configuration commands, one per line. End with cntl/z.
B (config) #interface serial 2/0
B (config-if) #shutdown
B (config-if) #Sep 1 23:33:37 routerb%7:%link changed:interface serial
4/0, changed state to administratively down
Sep 1 23:33:37 routerb%7:%line PROTOCOL change:interface serial 2/0,
Changed state to Down
B (config-if) #no shutdown
B (config-if) #Sep 1 23:33:43 routerb%7:ppp:ppp_clear_author (), protocol
= LCP
Sep 1 23:33:43 routerb%7:%link changed:interface serial 2/0, CHANGED State
to Up
Sep 1 23:33:45 routerb%7:ppp:serial2/0 [I] pap-req ID 2 len 12
Sep 1 23:33:45 routerb%7:ppp:authenticating peer serial 2/0
Sep 1 23:33:45 routerb%7:ppp:serial 2/0 PAP authentication ok!
Sep 1 23:33:45 routerb%7:ppp:serial 2/0 [O] PAP SUCCESS ID 2 len 1
Sep 1 23:33:45 routerb% 7::P pp:serial 2/0 authentication OK, begin
networkphase!
Sep 1 23:33:45 routerb%7:ppp:ppp_clear_author (), protocol = IPCP
Sep 1 23:33:46 routerb%7:%line PROTOCOL change:interface serial 2/0,
Changed state to Up
"Precautions"
When encapsulating a WAN protocol, it is required that the two-port encapsulation protocol of the V.35 cable be consistent, otherwise the link cannot be established.
?
"Reference Configuration"
A#show Running-config
Following
Basic configuration of the router:
650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8A/DB/wKiom1g9QQmRsQg_AAAVvU6F8NE270.png-wh_500x0-wm_3 -wmp_4-s_2093814031.png "style=" Float:none; "title=" Captures 1.1.PNG "alt=" wkiom1g9qqmrsqg_aaavvu6f8ne270.png-wh_50 "/ >
650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8A/D6/wKioL1g9QQqQ8qzWAAAy-54HAug819.png-wh_500x0-wm_3 -wmp_4-s_867637172.png "style=" Float:none; "title=" Captures 1. PNG "alt=" Wkiol1g9qqqq8qzwaaay-54haug819.png-wh_50 "/>
Configure PAP authentication:
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8A/D6/wKioL1g9QRyQDXAPAAAC2pJ-KSg160.png-wh_500x0-wm_3 -wmp_4-s_15997610.png "style=" Float:none; "title=" Captures 2.2.PNG "alt=" Wkiol1g9qryqdxapaaac2pj-ksg160.png-wh_50 "/>
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8A/DB/wKiom1g9QRyisS2IAAANT-QLpsg084.png-wh_500x0-wm_3 -wmp_4-s_321994519.png "style=" Float:none; "Title=" Captures 2. PNG "alt=" Wkiom1g9qryiss2iaaant-qlpsg084.png-wh_50 "/>
Verify PAP Certification:
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8A/DB/wKiom1g9QTTj6zfWAAAbYILvU0Y616.png-wh_500x0-wm_3 -wmp_4-s_2386210978.png "style=" Float:none; "title=" Captures 3.3.PNG "alt=" wkiom1g9qttj6zfwaaabyilvu0y616.png-wh_50 "/ >
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8A/D6/wKioL1g9QTSwmm5EAAAzW-6ifog351.png-wh_500x0-wm_3 -wmp_4-s_1826534256.png "style=" Float:none; "Title=" Captures 3. PNG "alt=" Wkiol1g9qtswmm5eaaazw-6ifog351.png-wh_50 "/>
650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M02/8A/DB/wKiom1g9QTSDNH6mAAANnN4-D-o489.png-wh_500x0-wm_3 -wmp_4-s_3912294023.png "style=" Float:none; "title=" Captures 4.4.PNG "alt=" wkiom1g9qtsdnh6maaannn4-d-o489.png-wh_50 "/ >
650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8A/D7/wKioL1g9QTTwlRm3AAAM2yFpyS4370.png-wh_500x0-wm_3 -wmp_4-s_1229676972.png "style=" Float:none; "Title=" Captures 4. PNG "alt=" Wkiol1g9qttwlrm3aaam2yfpys4370.png-wh_50 "/>
PPP PAP Certification