PPP

骑猪看日落 2023-07-02 11:25 12阅读 0赞

**PPP：与以太网一样，是数据链路层 协议**

WAN口：  
Ethernet口：以太网口，有可能运营商网络二层协议不是以太网，如串行协议，这些协议对应不同的接口。现在网络，企业网络，运营商之间，运营商与数据中心之间，由于速率比较高，并且传输距离比较长，一般传输介质使用的是光纤，所以流行的接口为POS口。一般长距离、传输速率高，则使用POS口。

我们今天讲的PPP协议，是在WAN口上（使用POS口，串行口）。

https://www.cnblogs.com/jodyccf/p/10458270.html

如果上层为IP协议，NCP就是IPCP协议。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mjg2ODYzOA_size_16_color_FFFFFF_t_70]

--在POS接口上配置ip
    [r3]int p2/0/0
    [r3-Pos2/0/0]ip add 200.1.1.2 24
    [r3-Pos2/0/0]display this
    [V200R003C00]
    #
    interface Pos2/0/0
     link-protocol ppp --配置启动PPP协议
     ip address 200.1.1.2 255.255.255.0 
    #
    
    --修改链路层协议为hdlc
    [r3-Pos2/0/0]link-protocol hdlc
    [r3-Pos2/0/0]display this
    [V200R003C00]
    #
    interface Pos2/0/0
     link-protocol hdlc
     ip address 200.1.1.2 255.255.255.0 
    
    --查看pos接口详情
    [r3]display interface pos2/0/0
    Pos2/0/0 current state : UP
    Line protocol current state : UP
    Last line protocol up time : 2020-01-29 14:46:15 UTC-08:00
    Description:HUAWEI, AR Series, Pos2/0/0 Interface
    Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
    Internet Address is 200.1.1.2/24
    Link layer protocol is PPP
    LCP opened, IPCP opened
    Last physical up time   : 2020-01-29 14:46:03 UTC-08:00
    Last physical down time : 2020-01-29 14:41:07 UTC-08:00
    Current system time: 2020-01-29 14:46:36-08:00
    Last 300 seconds input rate 0 bits/sec 0 packets/sec
    Last 300 seconds output rate 0 bits/sec 0 packets/sec
    
    Input: 59 packets, 1902 bytes
      Total error:              0,    CRC:                      0
      Giants:                   0,    Runts:                    0
    Output: 61 packets, 858 bytes
      Total error:              0
        Input bandwidth utilization  :    0%
        Output bandwidth utilization :    0%
        
    --被验证方增加用户名和密码
    [r3-Pos2/0/0]ppp pap local-user huawei password cipher hlh
    
    --验证方开启认证功能
    [r1-Pos6/0/0]ppp authentication-mode pap
    [r1-Pos6/0/0]q
    [r1]aaa
    [r1-aaa]local-user huawei password cipher hlh
    [r1-aaa]local-user hlh service-type ppp

--验证方开启认证功能
    [r1]aaa
    [r1-aaa]local-user huawei password cipher hlh
    [r1-aaa]local-user hlh service-type ppp 
    [r1-Pos6/0/0]ppp authentication-mode chap
    [r1-Pos6/0/0]ppp chap user huawei
    
    --被验证方增加用户名和密码
    [r3-Pos2/0/0]ppp chap user huawei 
    [r3-Pos2/0/0]pap chap password cipher hlh

PPPOE：  
在以太网上，封装PPP。  
以前数据侦里封装IP，现在先封装PPP，在封装IP。

interface dialer 1
    ip address ppp-negotiate
    ppp pap local-user huawei password cipher hlh
    dialer bundle 12
    dialer user huawei
    dialer bundle 12
    
    pppoe-client dialer-bundle-number 12
    
    interface virtual-template 1 
    ip add 100.1.1.1 24
    ppp authentication-mode pap
    
    ip pool 1
    network 100.1.1.0 mask 24
    interface virutal-template 1
    remote address pool 1
    pppoe-server bind virtual-template 1
    
    --一定要记得建议路由
    ip route-static 0.0.0.0 0.0.0.0 dialer 1
    
    --建立pat-easy
    acl 2000
    rule 5 permit source 192.168.1.1 0.0.0.0
    nat outbound 2000

--配置mutil ppp
    [r1]interface mp-group 0/0/1 --自定义虚接口
    ip add 192.168.2.1 24
    
    interface s4/0/0
    ppp mp mp-group 0/0/1
    
    interface s4/0/1
    ppp mp mp-group 0/0/2
    
    [r2]
    interface mp-group 0/0/1
    ip add 192.168.2.2 24
    
    interface s4/0/0
    ppp mp mp-group 0/0/1
    
    interface s4/0/1
    ppp mp mp-group 0/0/2
    
    --配置r1为认证方，r2是被认证方
    [r1]
    aaa
    local-user huwei password hcie
    local-user service-type ppp
    
    interface s4/0/0
    ppp authentication-mode chap
    
    interface s4/0/1
    ppp authentication-mode chap
    
    
    [r2]
    interface s4/0/0
    ppp chap user huawei
    ppp chap password cipher hcie
    
    interface s4/0/1
    ppp chap user huawei
    ppp chap password cipher hcie
    --一定要重启接口
    [r1]
    interface s4/0/0
    shutdown
    undoshutdown
    
    interface s4/0/1
    shutdown
    undoshutdown
    --配置双向认证
    [r2]
    aaa
    local-user cisco password ccie
    local-user service-type ppp
    
    interface s4/0/0
    ppp authentication-mode chap
    
    interface s4/0/1
    ppp authentication-mode chap
    
    [r1]
    interface s4/0/0
    ppp chap user cisco
    pass chap passowrd cipher ccie
    
    interface s4/0/1
    ppp chap user cisco
    pass chap passowrd cipher ccie
    
    [r2]
    interface s4/0/0
    shutdown
    undoshutdown
    
    interface s4/0/1
    shutdown
    undoshutdown

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mjg2ODYzOA_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200129152554567.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80Mjg2ODYzOA==,size_16,color_FFFFFF,t_70