第十一章构建中小型路由交换网络PPT.ppt
第九章第九章PPP通过本章的学习，您应该掌握以下内容通过本章的学习，您应该掌握以下内容在广域网的串行口上配置在广域网的串行口上配置HDLC 和和PPP 协协议议在一个在一个 PPP 连接内配置连接内配置PAP 和和CHAP 验证验证查看点到点的查看点到点的 HDLC 和和 PPP 协议配置情况协议配置情况本章目标本章目标WAN 概述概述Service Provider广域网连接的场所广域网连接的场所根据用户不同的需求提供不同的连接方案根据用户不同的需求提供不同的连接方案专线专线同步串口同步串口TelephoneCompany电路交换电路交换异步串口异步串口ServiceProvider包交换包交换同步串口同步串口广域网连接类型广域网连接类型:物理层物理层Point-to-point orcircuit-switched connectionCO SwitchCustomer Premises EquipmentDemarcationLocal LoopWAN service provider toll networkTrunks and switches广域网的服务提供广域网的服务提供服务商给用户分配线路的参数服务商给用户分配线路的参数SSSSSSSRouter connectionsNetwork connections at the CSU/DSUEIA/TIA-232EIA/TIA-449EIA-530V.35X.21CSU/DSUEnd user deviceService ProviderDTEDCEPPP 的串口连接的串口连接专线专线包交换包交换PPP,SLIP,HDLCHDLC,PPP,SLIP电路交换电路交换X.25,Frame Relay,ATM广域网连接类型广域网连接类型:数据链路层数据链路层TelephoneCompanyServiceProviderFlagAddressControlDataFCSFlagHDLC支持单一的协议环境支持单一的协议环境 FlagAddressControlProprietaryDataFCSFlagCisco HDLCHDLC 帧格式帧格式Cisco的的 HDLC 具有具有proprietary 字节提供对多协议环境的支持字节提供对多协议环境的支持HDLC 命令命令Router(config-if)#encapsulation hdlc启用启用HDLC封装封装HDLC是同步串口的缺省封装格式是同步串口的缺省封装格式PPP EncapsulationTCP/IPNovell IPXAppleTalkMultiple protocol encapsulations using NCPs in PPP PPP 可以通过可以通过 NCP 携带多个协议的数据包携带多个协议的数据包PPP 可以通过可以通过 LCP 建立和控制连接建立和控制连接 Link setup and control using LCP in PPP PPP 综述综述Synchronous or AsynchronousPhysical MediaLink Control Protocol Authentication,other optionsNetwork Control Protocol PPPData LinkLayerPhysicalLayerNetworkLayerIPCPIPXCPMany OthersIPIPXLayer 3 ProtocolsPPP 分层结构分层结构PPPA data link with network-layer servicesFeature How It OperatesProtocolAuthenticationPAPCHAPPerform Challenge HandshakeRequire a passwordCompressionCompress data at source;reproduce data at destinationStacker orPredictorError DetectionAvoid frame loopingMonitor data dropped on linkMagic NumberMultilinkLoad balancing across multiple linksMultilink Protocol(MP)PPP LCP 配置选项配置选项PPP 验证概述验证概述两种两种 PPP 验证协议验证协议:PAP 和和 CHAPPPP 会话的建立会话的建立1链路建立链路建立2验证阶段验证阶段3 网路层协议连接网路层协议连接Dialup or Circuit-Switched NetworkPAPPAP是两次握手验证协议，口令以明文传送，被验证方首先发起验证请求是两次握手验证协议，口令以明文传送，被验证方首先发起验证请求验证两端是同等的验证两端是同等的选择选择 PPP 验证协议验证协议Remote Router(SantaCruz)Central-Site Router(HQ)Hostname:santacruzPassword:boardwalk username santacruzpassword boardwalk PAP 2-Way Handshake“santacruz,boardwalk”Accept/Reject主验证方主验证方被验证方被验证方选择选择 PPP 验证协议验证协议Remote Router(SantaCruz)Central-Site Router(HQ)Hostname:santacruzPassword:boardwalk username santacruzpassword boardwalk CHAP3-Way HandshakeChallengeResponseAccept/RejectCHAPCHAP是三次握手验证协议，不发送口令，主验证方首先发起验证请求是三次握手验证协议，不发送口令，主验证方首先发起验证请求密码是加密的密码是加密的,安全性比安全性比PAPPAP高。高。被验证方被验证方主验证方主验证方 配置配置 PPP 验证总述验证总述ServiceProviderVerify who you are.Router to Be Authenticated(The router that initiated the call.)ppp encapsulation hostname username/password ppp authenticationAuthenticating Router(The router that received the call.)ppp encapsulation hostname username/password ppp authenticationEnabling PPPEnabling PPP AuthenticationEnabling PPPEnabling PPP Authentication 配置配置 PPPRouter(config-if)#encapsulation ppp激活激活 PPP 验证验证配置配置 PPP 验证验证Router(config)#hostname name给路由器命名给路由器命名Router(config)#username name password password提供需要验证的路由器的名称和密码提供需要验证的路由器的名称和密码配置配置 PPP 验证验证Router(config-if)#ppp authenticationchap|chap pap|pap chap|pap激活激活 PAP 或或 CHAP 验证验证PAP 配置举例配置举例hostname Routerusername R2 password cisco!int serial 0 ip address 10.0.1.1 255.255.255.0 encapsulation ppp ppp authentication PAPhostname Router!int serial 0 ip address 10.0.1.2 255.255.255.0 encapsulation ppp ppp pap sent-username R2 password 0 ciscoR1R2PSTN/ISDN密码必须相同，而且是区分大小写的密码必须相同，而且是区分大小写的CHAP 配置举例配置举例hostname leftusername right password sameone!int serial 0 ip address 10.0.1.1 255.255.255.0 encapsulation ppp ppp authentication CHAPhostname rightusername left password sameone!int serial 0 ip address 10.0.1.2 255.255.255.0 encapsulation ppp ppp authentication CHAPLeftrouterRightrouterPSTN/ISDN查看查看 HDLC 和和 PPP 的封装的封装Router#show interface s0Serial0 is up,line protocol is up Hardware is HD64570 Internet address is 10.140.1.2/24 MTU 1500 bytes,BW 1544 Kbit,DLY 20000 usec,rely 255/255,load 1/255 Encapsulation PPP,loopback not set,keepalive set(10 sec)LCP Open Open:IPCP,CDPCP Last input 00:00:05,output 00:00:05,output hang never Last clearing of show interface counters never Queueing strategy:fifo Output queue 0/40,0 drops;input queue 0/75,0 drops 5 minute input rate 0 bits/sec,0 packets/sec 5 minute output rate 0 bits/sec,0 packets/sec 38021 packets input,5656110 bytes,0 no buffer Received 23488 broadcasts,0 runts,0 giants,0 throttles 0 input errors,0 CRC,0 frame,0 overrun,0 ignored,0 abort 38097 packets output,2135697 bytes,0 underruns 0 output errors,0 collisions,6045 interface resets 0 output buffer failures,0 output buffers swapped out 482 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up 利用利用 debug ppp authentication 命令命令查看查看PPP 验证验证 4d20h:%LINK-3-UPDOWN:Interface Serial0,changed state to up4d20h:Se0 PPP:Treating connection as a dedicated line4d20h:Se0 PPP:Phase is AUTHENTICATING,by both4d20h:Se0 CHAP:O CHALLENGE id 2 len 28 from”left4d20h:Se0 CHAP:I CHALLENGE id 3 len 28 from”right4d20h:Se0 CHAP:O RESPONSE id 3 len 28 from”left4d20h:Se0 CHAP:I RESPONSE id 2 len 28 from”right4d20h:Se0 CHAP:O SUCCESS id 2 len 44d20h:Se0 CHAP:I SUCCESS id 3 len 44d20h:dialer Protocol up for Se04d20h:%LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0,changed state to upLeftrouterRightrouterService Provider完成本章的学习后，你应该能够掌握：完成本章的学习后，你应该能够掌握：在广域网的串行口上配置在广域网的串行口上配置HDLC 和和PPP 协议协议在一个在一个 PPP 连接内配置连接内配置PAP 和和CHAP 验证验证查看点到点的查看点到点的 HDLC 和和 PPP 协议配协议配置情况置情况本章总结本章总结
