周芷若玄冥二老乳珠:PPP协议的概述

来源:百度文库 编辑:中财网 时间:2024/05/06 07:48:05
router(config)#interface interface-type interface-idrouter(config-if)#encapsulation ppp                                                欲配置PPP协议,首先要在接口封装PPP协议。                          no encapsulation ppp                                           取消         (可选)配置PPP CHAP 的被验证方。CHAP的协商一般由验证方发起,PPP验证方只发送PPP认证用的用户名和口令,默认下,被验证方只发送自己的主机名作为PPP用户名。router(config-if)#ppp chap hostname hostname                              指定PPP CHAP验证的主机名router(config-if)#ppp chap password {0/7}password                    指定PPPCHAP验证的密码 如果知道验证方PPP CHAP所用的主机名,也可以执行以下配置。router(config-if)#ppp chap hostname hostname                              指定PPP CHAP验证的主机名 router(config-if)#username username password {0/7}password     为验证方主机名创建用户数据库记录,两端密码要保持一致。                                                                                                    提示:密码验证有明文和秘文,用0是非密文输入,用1-7是密文,默认为明                                                                                                     与其他厂家设备互联时候,只能采用不加密方式,如果要配置双向验证,还                                                                                                     增加验证方的配置。 (可选)配置PPP CHAP 验证方。router(config-if)#ppp authentication chap [callin]                            启用PPP验证,并指定PPP CHAP验证方式                          no ppp authentication chap                                  取消username username password {0/7} password    创建用户数据库记录,可以是本地数据库,也可以是AAA服务器集中管理用                                                                                                     户数据库。                                                                                提示           callin是可选项,设定之后,只有对方路由器(被验证方)通过拨号网络拨入                                                                                                    时才挑起CHAP验证,对于本端路由器拨出而建立PPP连接则不挑起CHAP验                                                                                                    证。因此,该命令项不会影响专线PPP协商过程。 (可选)配置PPP PAP被验证方。 router(config-if)#ppp pap sent-username username password{0/7}password                          no ppp pap sent-username (可选)配置PPP PAP 验证方router(config-if)#ppp authentication chap [callin]  设定PPP的验证方router(config-if)#username username password {0/7} password  创建用户数据库记录,可以是本地数据库,也可以是AAA服务器集中管理用                                                                                                   户数据库。router(config-if)#ppp compress {stacker | predictor} pap             设置PPP的压缩方式                          no ppp compression  (可选)设置PPP协商参数。PPP协商时,LCP和IPCP都有个超时时间,一旦到了这个超时时间,LCP将重新发送请求,这个超时时间可以通过发送命令,以便协调和异种设备互联时候出现的不一致协商时间router(config-if)#ppp negotiation-timeout seconds                          no ppp negotiation-timeoutrouter(config-if)#end      router#copy running-config startup-config