-----------------------------------------PAP认证----------------------------
B认证A(单向认证)PAP
B创建用户数据库 usernameApassword xyz
两头封装PPP encapsulation ppp
B开启认证 ppp authentication pap
A发认证请求消息 ppp pap sent-username A password xyz
课本P67认证过程!
A(被认证方)
int s0/0/0
encapsulation ppp
ppp pap sent-username A pass xyz
username A password xyz
B(认证方)
int s0/0/1
encapsulation ppp
ppp authentication pap
-------------------------------------------------------------------------
B和A互认证(双向认证)PAP
两头建立用户数据库
两头封装PPP
两头都开启认证
两头都发认证消息
A(被认证方/认证方)
username B password cisco
int s0/0/0
ppp authentication pap
ppp pap sent-username A pass cisco
B(认证方/被认证方)
username A password cisco
int s0/0/1
encapsulation ppp
ppp authentication pap
ppp pap sent-username B pass cisco
@切记PAP发送的是自己的用户名!
-----------------------------------------CHAP认证-------------------------
B认证A(单向认证)CHAP
A和B创建用户数据库 username ? password ??
两头封装PPP encapsulation ppp
B开启认证 ppp authentication chap
课本P67认证过程!
A(被认证方)
username B password cisco
int s0/0/0
encapsulation ppp
ppp authentication chap
B(认证方)
username A password cisco
int s0/0/1
encapsulation ppp
-----------------------------------------------------------------------
B和A互认证(双向认证)CHAP
A和B创建用户数据库 username ? password ??
两头封装PPP encapsulation ppp
A和B都开启认证 ppp authentication chap
课本P67认证过程!
A(被认证方/认证方)
username B password cisco
int s0/0/0
encapsulation ppp
ppp authentication chap
B(认证方/被认证方)
username A password cisco
int s0/0/1
encapsulation ppp
ppp authentication chap
总结:谁是认证方,就看接口下是否有命令: ppp authentication pap [chap]
ppp authentication pap
ppp authentication chap
ppp authentication pap chap
ppp authentication chap pap
都是合法的!
-----------------------------------------------------------------------
以上是借鉴老师的学习笔记总结,大家共勉!