资源描述
Body Text,Second Level,Third Level,Fourth Level,Fifth Level,Slide Title,1999,Cisco Systems,Inc.,ICND12-,*,第十二章建立串行的点对点连接,通过本章的学习，您应该掌握以下内容：,在广域网的串行口上配置,HDLC,和,PPP,协议,在一个,PPP,连接内配置,PAP,和,CHAP,验证,查看点到点的,HDLC,和,PPP,协议配置情况,本章目标,WAN,概述,Service Provider,广域网连接的场所,根据用户不同的需求提供不同的连接方案,专线,同步串口,Telephone,Company,电路交换,异步串口,Service,Provider,包交换,同步串口,广域网连接类型:物理层,Point-to-point or,circuit-switched connection,CO Switch,Customer Premises Equipment,Demarcation,Local Loop,WAN service provider toll network,Trunks and switches,广域网的服务提供,服务商给用户分配线路的参数,S,S,S,S,S,S,S,Router connections,Network connections at the CSU/DSU,EIA/TIA-232,EIA/TIA-449,EIA-530,V.35,X.21,CSU/DSU,End user device,Service Provider,DTE,DCE,PPP,的串口连接,专线,包交换,PPP,SLIP,HDLC,HDLC,PPP,SLIP,电路交换,X.25,Frame Relay,ATM,广域网连接类型:数据链路层,Telephone,Company,Service,Provider,Flag,Address,Control,Data,FCS,Flag,HDLC,支持单一的协议环境,Flag,Address,Control,Proprietary,Data,FCS,Flag,Cisco HDLC,HDLC,帧格式,Cisco,的,HDLC,具有,proprietary,字节提供对多协议环境的支持,HDLC,命令,Router(config-if)#encapsulation hdlc,启用,HDLC,封装,HDLC,是同步串口的缺省封装格式,PPP Encapsulation,TCP/IP,Novell IPX,AppleTalk,Multiple protocol encapsulations using NCPs in PPP,PPP,可以通过,NCP,携带多个协议的数据包,PPP,可以通过,LCP,建立和控制连接,Link setup and control using LCP in PPP,PPP,综述,Synchronous or Asynchronous,Physical Media,Link Control Protocol,Authentication,other options,Network Control Protocol,PPP,Data Link,Layer,Physical,Layer,Network,Layer,IPCP,IPXCP,Many Others,IP,IPX,Layer 3 Protocols,PPP,分层结构,PPPA data link with network-layer services,Feature,How It Operates,Protocol,Authentication,PAP,CHAP,Perform Challenge Handshake,Require a password,Compression,Compress data at source;reproduce data at destination,Stacker or,Predictor,Error Detection,Avoid frame looping,Monitor data dropped on link,Magic Number,Multilink,Load balancing across multiple links,Multilink Protocol(MP),PPP LCP,配置选项,PPP,验证概述,两种,PPP,验证协议,:PAP,和,CHAP,PPP,会话的建立,1链路建立,2,验证阶段,3 网路层协议连接,Dialup or Circuit-Switched Network,密码明文传输,验证两端是同等的,选择,PPP,验证协议,Remote Router,(SantaCruz),Central-Site Router(HQ),Hostname:santacruz,Password:boardwalk,username santacruz,password boardwalk,PAP,2-Way Handshake,“,santacruz,boardwalk”,Accept/Reject,选择,PPP,验证协议,Remote Router,(SantaCruz),Central-Site Router(HQ),Hostname:santacruz,Password:boardwalk,username santacruz,password boardwalk,CHAP,3-Way Handshake,Challenge,Response,Accept/Reject,密码是加密的,配置,PPP,验证总述,ServiceProvider,Verify who,you are.,Router to Be Authenticated,(The router that initiated the call.),ppp encapsulation,hostname username/password,ppp authentication,Authenticating Router,(The router that received the call.),ppp,encapsulation,hostname,username/password,ppp authentication,Enabling PPP,Enabling PPP Authentication,Enabling PPP,Enabling PPP Authentication,配置,PPP,Router(config-if)#encapsulation,ppp,激活,PPP,验证,配置,PPP,验证,Router(config)#,hostname,name,给路由器命名,Router(config)#username,name,password,password,提供需要验证的路由器的名称和密码,配置,PPP,验证,Router(config-if)#ppp authenticationchap|chap pap|pap chap|pap,激活,PAP,或,CHAP,验证,CHAP,配置举例,hostname left,username right password sameone,!,int serial 0,ip,address 10.0.1.1 255.255.255.0,encapsulation ppp,ppp,authentication CHAP,hostname right,username left password sameone,!,int serial 0,ip,address 10.0.1.2 255.255.255.0,encapsulation ppp,ppp,authentication CHAP,Leftrouter,Right,router,PSTN/ISDN,查看,HDLC,和,PPP,的封装,Router#show interface s0,Serial0 is up,line protocol is up,Hardware is HD64570,Internet address is 10.140.1.2/24,MTU 1500 bytes,BW 1544,Kbit,DLY 20000,usec,rely 255/255,load 1/255,Encapsulation PPP,loopback,not set,keepalive,set(10 sec),LCP Open,Open:IPCP,CDPCP,Last input 00:00:05,output 00:00:05,output hang never,Last clearing of show interface counters never,Queueing,strategy:,fifo,Output queue 0/40,0 drops;input queue 0/75,0 drops,5 minute input rate 0 bits/sec,0 packets/sec,5 minute output rate 0 bits/sec,0 packets/sec,38021 packets input,5656110 bytes,0 no buffer,Received 23488 broadcasts,0 runts,0 giants,0 throttles,0 input errors,0 CRC,0 frame,0 overrun,0 ignored,0 abort,38097 packets output,2135697 bytes,0,underruns,0 output errors,0 collisions,6045 interface resets,0 output buffer failures,0 output buffers swapped out,482 carrier transitions,DCD=up DSR=up DTR=up RTS=up CTS=up,利用,debug ppp authentication,命令查看,PPP,验证,4,d20h:%LINK-3-UPDOWN:Interface Serial0,changed state to up,4d20h:Se0 PPP:Treating connection as a dedicated line,4d20h:Se0 PPP:Phase is AUTHENTICATING,by both,4d20h:Se0 CHAP:O CHALLENGE id 2 len 28 from”left,4d20h:Se0 CHAP:I CHALLENGE id 3 len 28 from”right,4d20h:Se0 CHAP:O RESPONSE id 3 len 28 from”left,4d20h:Se0 CHAP:I RESPONSE id 2 len 28 from”right,4d20h:Se0 CHAP:O SUCCESS id 2 len 4,4d20h:Se0 CHAP:I SUCCESS id 3 len 4,4d20h:dialer Protocol up for Se0,4d20h:%LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0,changed state to up,Leftrouter,Right,router,Service Provider,可视化目标,pod,ro,s s0,A10.140.1.2B10.140.2.2,C10.140.3.2,D10.140.4.2,E10.140.5.2,F10.140.6.2,G10.140.7.2,H10.140.8.2,I10.140.9.2,J10.140.10.2,K1
展开阅读全文