Cisco Config PPPoE + CHAP Authentication,
Seperti sebelumnya saya sudah mempraktikkan bagaimana cara membangun server pppoe dengan dhcp server di cisco, Pada percobaan kali ini R1 merupakan client dan R2 adalah servernya.
R2(config)#bba-group pppoe FLASH
R2(config-bba-group)#virtual-template 1
R2(config-bba-group)#interface fa0
R2(config-if)#pppoe enable group FLASH
R2(config-if)#interface virtual-template1
R2(config-if)#ip address 192.168.1.1 255.255.255.0
R2(config-if)#ip dhcp pool FLASH
R2(dhcp-config)#network 192.168.1.0 255.255.255.0
R2(dhcp-config)#interface virtual-template1
R2(config-if)#peer default ip address dhcp-pool FLASH
R2(config-if)#username FLASH password CISCO
R2(config)#int virtual-template1
R2(config-if)#ppp authentication chap
R2(config-if)#do debug ppp authentication
PPP authentication debugging is on
R2(config-if)#int fa0
R2(config-if)#shutdown
*Mar 1 00:21:15.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar 1 00:21:16.655: %LINK-5-CHANGED: Interface FastEthernet0, changed state to administratively down
R2(config-if)#no shutdown
*Mar 1 00:21:29.207: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:21:30.207: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
R2(config-if)#do u all
Port Statistics for unclassified packets is not turned on.
All possible debugging has been turned off
R1(config)#int fa0
R1(config-if)#pppoe enable group FLASH
R1(config-if)# no shut
R1(config-if)#pppoe-client dial-pool-number 1
R1(config-if)#interface dialer1
R1(config-if)#ip address dhcp
R1(config-if)#encapsulation ppp
R1(config-if)#dialer pool 1
R1(config-if)#int dialer 1
R1(config-if)#encapsulation ppp
R1(config-if)#ppp chap hostname FLASH
R1(config-if)#ppp chap password CISCO
R1(config-if)#do debug ppp authentication
PPP authentication debugging is on
R1(config-if)#int dialer1
R1(config-if)#shutdown
*Mar 1 00:13:21.827: %DIALER-6-UNBIND: Interface Vi2 unbound from profile Di1
*Mar 1 00:13:21.835: Di1 DDR: dialer shutdown complete
*Mar 1 00:13:21.863: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down
*Mar 1 00:13:22.863: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down
*Mar 1 00:13:23.839: %LINK-5-CHANGED: Interface Dialer1, changed state to administratively down
R1(config-if)#no shutdown
*Mar 1 00:13:48.247: %LINK-3-UPDOWN: Interface Dialer1, changed state to up
*Mar 1 00:13:50.043: %DIALER-6-BIND: Interface Vi2 bound to profile Di1
*Mar 1 00:13:50.043: Vi2 PPP: Using dialer call direction
*Mar 1 00:13:50.047: Vi2 PPP: Treating connection as a callout
*Mar 1 00:13:50.047: Vi2 PPP: Session handle[5100000E] Session id[0]
*Mar 1 00:13:50.047: Vi2 PPP: Authorization required
*Mar 1 00:13:50.047: Vi2 PPP: No remote authentication for call-out
*Mar 1 00:13:51.247: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
*Mar 1 00:13:52.015: Vi2 PPP: No authorization without authentication
*Mar 1 00:13:52.023: Vi2 CHAP: I CHALLENGE id 1 len 23 from "R2"
*Mar 1 00:13:52.031: Vi2 CHAP: Using hostname from interface CHAP
*Mar 1 00:13:52.031: Vi2 CHAP: Using password from interface CHAP
*Mar 1 00:13:52.031: Vi2 CHAP: O RESPONSE id 1 len 26 from "FLASH"
*Mar 1 00:13:52.083: Vi2 CHAP: I SUCCESS id 1 len 4
*Mar 1 00:13:53.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
*Mar 1 00:14:13.827: %DHCP-6-ADDRESS_ASSIGN: Interface Dialer1 assigned DHCP address 192.168.1.7, mask 255.255.255.0, hostname R1
R1(config-if)#do u all
Port Statistics for unclassified packets is not turned on.
All possible debugging has been turned off
R1(config-if)#do sh ip int br
Interface IP-Address OK? Method Status Protocol
Dialer1 192.168.1.7 YES DHCP up up
FastEthernet0 unassigned YES unset up up
Serial0 unassigned YES unset administratively down down
Serial1 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
R1(config-if)#do ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/20 ms
0 comments:
Post a Comment