案例四 ADSL的配置

1、案例四 ADSL的配置【背景描述】你是公司的網(wǎng)絡(luò)管理員，兩個(gè)分公司之間希望能夠申請(qǐng)一條廣域網(wǎng)專線進(jìn)行連接。 現(xiàn)有銳捷路由器兩臺(tái)，希望你了解該設(shè)備的廣域網(wǎng)接口所支持的協(xié)議，以確定選擇哪種廣域網(wǎng)鏈路。公司為了滿足不斷增長(zhǎng)的業(yè)務(wù)需求，申請(qǐng)了專線接入，你的客戶端與ISP進(jìn)行鏈路協(xié)商時(shí)要驗(yàn)證身份，配置路由器保證鏈路建立，并考慮其安全性?！緦?shí)現(xiàn)功能】 在鏈路協(xié)商時(shí)保證安全驗(yàn)證。鏈路協(xié)商時(shí)用戶名、密碼以明文的方式傳輸?！臼褂迷O(shè)備】設(shè)備類型設(shè)備名稱設(shè)備數(shù)量交換機(jī)路由器Router2三層交換機(jī)串口線1計(jì)算機(jī)【實(shí)驗(yàn)拓?fù)洹俊緦?shí)現(xiàn)步驟】步驟1 基本配置Router(config)#hostname RaRa(conf

2、ig)#interface serial 0Ra(config-if)#ip address 1.1.1.1 255.255.255.0Ra(config-if)#no shutdownRa(config-if)#exitRouter(config)#hostname RbRb(config)#interface serial 0Rb(config-if)#ip address 1.1.1.2 255.255.255.0Rb(config-if)#no shutdown驗(yàn)證測(cè)試：(以Ra為例)Ra#show interfaces serial 0Serial0 is up, line prot

3、ocol is up Hardware is HDLC4530A Internet address is 1.1.1.1/24 MTU 1500 bytes, BW 2048 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:09, output 00:00:08, output hang never Last clearing of "show interface" coun

4、ters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 65531/64/0 (size/threshold/drops) Conversations 0/1 (active/max active) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute ou

5、tput rate 0 bits/sec, 0 packets/sec 409 packets input, 57032 bytes, 0 no buffer Received 404 broadcasts 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 163 packets output, 4312 bytes, 0 underruns 0 output errors, 0 collisions, 31 interface resets 0 output buffer failures, 0 output buff

6、ers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up步驟2 配置PPP認(rèn)證.被驗(yàn)證方的配置Ra(config)#interface serial 0Ra(config-if)#encapsulation ppp !在接口下封裝PPP協(xié)議Ra(config-if)#ppp pap sent-username Ra password 0 star !PPP認(rèn)證的用戶名、密碼驗(yàn)證方的配置Rb(config)#username Ra password 0 star !驗(yàn)證方配置被驗(yàn)證方的用戶名、密碼Rb(con

7、fig)#interface serial 0Rb(config-if)#encapsulation pppRb(config-if)#ppp authentication pap !PPP啟用PAP驗(yàn)證過(guò)程驗(yàn)證測(cè)試Ra#debug ppp authentication !觀察PAP認(rèn)證過(guò)程(這兒認(rèn)證顯示不詳細(xì))PPP authentication debugging is onRa#PPP Serial0: PAP ACKRemote message is:PPP Serial0: Passed PAP authentication with remote參考配置Ra#show runnin

8、g-config !路由器Ra的配置Building configuration.Current configuration:!version 6.14(9coll)!hostname "Ra"!ip subnet-zero!interface FastEthernet0 no ip address shutdown!interface FastEthernet1 no ip address shutdown!interface FastEthernet2 no ip address shutdown!interface FastEthernet3 no ip addres

9、s shutdown!interface Serial0 ip address 1.1.1.1 255.255.255.0 encapsulation ppp ppp pap sent-username Ra password 7 1234111358!interface Serial1 no ip address shutdown!interface Serial2 no ip address shutdown!interface Serial3 no ip address shutdown!ip classless!line con 0line aux 0line vty 0 4 logi

10、nline vty 5 19 login!endRb#show running-config !路由器Rb的配置Building configuration.Current configuration:!version 6.14(9coll)!hostname "Rb"!username Ra password 7 0059344251!ip subnet-zero!interface FastEthernet0 no ip address shutdown!interface FastEthernet1 no ip address shutdown!interface F

11、astEthernet2 no ip address shutdown!interface FastEthernet3 no ip address shutdown!interface Serial0 ip address 1.1.1.2 255.255.255.0 encapsulation ppp clock rate 64000 ppp authentication pap!interface Serial1 no ip address shutdown!ip classless!line con 0line aux 0line vty 0 4 loginline vty 5 19 login!end【注意事項(xiàng)】1.在DCE端