HDLC和PPP原理?
串口封裝協(xié)議:
HDLC?
配置：
interface Serial1/0/0
link-protocol hdlc? -------------默認(rèn)為PPP哺呜，修改為HDLC
PPP ----------點(diǎn)到點(diǎn)的協(xié)議?
兩個(gè)組成：
LCP? ----------------鏈路控制協(xié)議（各種鏈路層的協(xié)商）
LCP參數(shù)協(xié)商
MRU
認(rèn)證
魔術(shù)字
LCP四個(gè)報(bào)文
Request
Ack
Nak
Reject
NCP-----------------網(wǎng)絡(luò)控制協(xié)議（IPV4 V6? IPX? APPLETALK）
配置PPP
[AR1-Serial1/0/0]link-protocol? ppp?
Warning: The encapsulation protocol of the link will be changed. Continue? [Y/N]:Y
檢查：
[AR1]display? interface? Serial1/0/0
Serial1/0/0 current state : UP
Line protocol current state : DOWN
Description:HUAWEI, AR Series, Serial1/0/0 Interface
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 12.1.1.1/24
Link layer protocol is PPP
LCP opened, IPCP opened
Last physical up time? : 2019-08-06 21:05:26 UTC-08:00
Last physical down time : 2019-08-06 21:05:25 UTC-08:00
Current system time: 2019-08-06 21:05:49-08:00
Physical layer is synchronous, Virtualbaudrate is 64000 bps
Interface is DTE, Cable type is V11, Clock mode is TC
Last 300 seconds input rate 4 bytes/sec 32 bits/sec 0 packets/sec
Last 300 seconds output rate 2 bytes/sec 16 bits/sec 0 packets/sec
PPP認(rèn)證：
PAP認(rèn)證 -------------密碼認(rèn)證協(xié)議
二次握手暗膜，明文認(rèn)證
單向認(rèn)證配置思路：
認(rèn)證方:
第一步：配置數(shù)據(jù)庫(kù)------給被認(rèn)證方使用
aaa
local-user huawei password cipher? huawei---------------------定義用戶(hù)名和密碼
local-user huawei service-type ppp -----------------------------開(kāi)啟PPP協(xié)議
第二步：接口開(kāi)啟PPP PAP認(rèn)證
interface Serial1/0/0
link-protocol ppp ---------------------前提條件，必須是PPP封裝
ppp authentication-mode pap ----------開(kāi)啟PPP認(rèn)證
如果被認(rèn)證沒(méi)有配置PPP認(rèn)證，報(bào)錯(cuò)如下：
Aug? 6 2019 21:15:12-08:00 AR1 %%01PPP/4/RESULTERR(l)[6]:On the interface Serial
1/0/0, LCP negotiation failed because the result cannot be accepted.
-----------------------------------------------------------------------
被認(rèn)證方：
interface Serial1/0/0
link-protocol ppp
ppp pap local-user huawei password simple huawei? -----------發(fā)送用戶(hù)名和密碼到認(rèn)證方
CHAP認(rèn)證 ------------挑戰(zhàn)握手認(rèn)證協(xié)議
三次握手调鲸，MD5認(rèn)證
單向認(rèn)證配置思路：
認(rèn)證方:
第一步：配置數(shù)據(jù)庫(kù)------給被認(rèn)證方使用
aaa
local-user huawei password cipher? huawei---------------------定義用戶(hù)名和密碼
local-user huawei service-type ppp -----------------------------開(kāi)啟PPP協(xié)議
第二步：接口開(kāi)啟PPP PAP認(rèn)證
interface Serial1/0/0
link-protocol ppp ---------------------前提條件，必須是PPP封裝
ppp authentication-mode chap ----------開(kāi)啟PPP認(rèn)證
被認(rèn)證方：
interface Serial1/0/0
link-protocol ppp
ppp? chap user? huawei -----------發(fā)送用戶(hù)名給認(rèn)證方
ppp? chap password? simple? huawei -----發(fā)送密碼給認(rèn)證方
PPPOE （PPP Over Ethernet ）
工作原理：
兩個(gè)階段：
1.發(fā)現(xiàn)階段
2.會(huì)話階段
配置思路;
PPPOE服務(wù)端(不需要配置）
第一步：配置DHCP地址池
ip pool DHCP
gateway-list 172.16.1.1
network 172.16.1.0 mask 255.255.255.0
第二步：配置數(shù)據(jù)庫(kù)（AAA）
aaa
local-user huawei password cipher %$%$bom7Uph7"$epS$*lH/eH62Os%$%$
local-user huawei service-type ppp
第三步：創(chuàng)建虛模板
interface Virtual-Template1
ppp authentication-mode chap
remote address pool DHCP
ip address 172.16.1.1 255.255.255.0?
第四步：物理接口調(diào)用
interface GigabitEthernet0/0/0
pppoe-server bind Virtual-Template 1
------------------------------------------------
客戶(hù)端采用路由器
第一步: 配置撥號(hào)規(guī)則
dialer-rule
dialer-rule 1 ip permit
第二步：創(chuàng)建撥號(hào)接口
interface Dialer1
link-protocol ppp
ppp chap user 02554208366 ------------------------------ PPP CHAP認(rèn)證
ppp chap password cipher? 123456
ip address ppp-negotiate ----------------IP是協(xié)商的
dialer user test? ------------------------撥號(hào)用戶(hù)名稱(chēng)
dialer bundle 1? ------------------------撥號(hào)綁定
第三步：物理接口調(diào)用
interface GigabitEthernet0/0/0
pppoe-client dial-bundle-number 1
第四步：檢查
[AR2]display? interface? Dialer? 1
Dialer1 current state : UP
Line protocol current state : UP (spoofing)
Description:HUAWEI, AR Series, Dialer1 Interface
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is negotiated, 172.16.1.254/32
Link layer protocol is PPP
LCP initial
Physical is Dialer
Current system time: 2019-08-08 20:25:07-08:00
? ? Last 300 seconds input rate 0 bits/sec, 0 packets/sec
? ? Last 300 seconds output rate 0 bits/sec, 0 packets/sec
? ? Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
? ? Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
? ? Input: 0 bytes
? ? Output:0 bytes
? ? Input bandwidth utilization? :? ? 0%
? ? Output bandwidth utilization :? ? 0%
Bound to Dialer1:0:
Dialer1:0 current state : UP ,
Line protocol current state : UP
Link layer protocol is PPP
LCP opened, IPCP opened
Packets statistics:
? Input packets:0,? 0 bytes
? Output packets:0, 0 bytes
? FCS error packets:0
? Address error packets:0
? Control field control error packets:0
[AR2]display? pppoe-client? session? summary?
PPPoE Client Session:
ID? Bundle? Dialer? Intf? ? ? ? ? ? Client-MAC? ? Server-MAC? ? State
1? ? 1? ? ? 1? ? ? GE0/0/0? ? ? ? ? 00e0fc7f4716? 00e0fc985844? UP? ?
[AR2]
[AR2]display? ip int brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 2
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 3
Interface? ? ? ? ? ? ? ? ? ? ? ? IP Address/Mask? ? ? Physical? Protocol?
Dialer1? ? ? ? ? ? ? ? ? ? ? ? ? 172.16.1.254/32? ? ? up? ? ? ? up(s)? ?
GigabitEthernet0/0/0? ? ? ? ? ? ? unassigned? ? ? ? ? up? ? ? ? down? ? ?
GigabitEthernet0/0/1? ? ? ? ? ? ? unassigned? ? ? ? ? down? ? ? down? ? ?
GigabitEthernet0/0/2? ? ? ? ? ? ? unassigned? ? ? ? ? down? ? ? down? ? ?
NULL0? ? ? ? ? ? ? ? ? ? ? ? ? ? unassigned? ? ? ? ? up? ? ? ? up(s)? ?
[AR2] e
