Cisco Config PPPoE + CHAP Authentication

Leave a Comment
Cisco Config PPPoE + CHAP Authentication, Seperti sebelumnya saya sudah mempraktikkan bagaimana cara membangun server pppoe dengan dhcp server di cisco, Pada percobaan kali ini R1 merupakan client dan R2 adalah servernya.


R2(config)#bba-group pppoe FLASH 
R2(config-bba-group)#virtual-template 1
R2(config-bba-group)#interface fa0
R2(config-if)#pppoe enable group FLASH
R2(config-if)#interface virtual-template1
R2(config-if)#ip address 192.168.1.1 255.255.255.0
R2(config-if)#ip dhcp pool FLASH
R2(dhcp-config)#network 192.168.1.0 255.255.255.0
R2(dhcp-config)#interface virtual-template1
R2(config-if)#peer default ip address dhcp-pool FLASH
R2(config-if)#username FLASH password CISCO
R2(config)#int virtual-template1
R2(config-if)#ppp authentication chap

R2(config-if)#do debug ppp authentication
PPP authentication debugging is on 

R2(config-if)#int fa0
R2(config-if)#shutdown

*Mar  1 00:21:15.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
*Mar  1 00:21:16.655: %LINK-5-CHANGED: Interface FastEthernet0, changed state to administratively down


R2(config-if)#no shutdown
*Mar  1 00:21:29.207: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar  1 00:21:30.207: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up 


R2(config-if)#do u all
Port Statistics for unclassified packets is not turned on.

All possible debugging has been turned off 



R1(config)#int fa0
R1(config-if)#pppoe enable group FLASH
R1(config-if)# no shut
R1(config-if)#pppoe-client dial-pool-number 1
R1(config-if)#interface dialer1
R1(config-if)#ip address dhcp
R1(config-if)#encapsulation ppp
R1(config-if)#dialer pool 1

R1(config-if)#int dialer 1
R1(config-if)#encapsulation ppp
R1(config-if)#ppp chap hostname FLASH
R1(config-if)#ppp chap password CISCO

R1(config-if)#do debug ppp authentication
PPP authentication debugging is on 


R1(config-if)#int dialer1
R1(config-if)#shutdown

*Mar  1 00:13:21.827: %DIALER-6-UNBIND: Interface Vi2 unbound from profile Di1
*Mar  1 00:13:21.835: Di1 DDR: dialer shutdown complete
*Mar  1 00:13:21.863: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down
*Mar  1 00:13:22.863: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down
*Mar  1 00:13:23.839: %LINK-5-CHANGED: Interface Dialer1, changed state to administratively down 


R1(config-if)#no shutdown
*Mar  1 00:13:48.247: %LINK-3-UPDOWN: Interface Dialer1, changed state to up
*Mar  1 00:13:50.043: %DIALER-6-BIND: Interface Vi2 bound to profile Di1
*Mar  1 00:13:50.043: Vi2 PPP: Using dialer call direction
*Mar  1 00:13:50.047: Vi2 PPP: Treating connection as a callout
*Mar  1 00:13:50.047: Vi2 PPP: Session handle[5100000E] Session id[0]
*Mar  1 00:13:50.047: Vi2 PPP: Authorization required
*Mar  1 00:13:50.047: Vi2 PPP: No remote authentication for call-out
*Mar  1 00:13:51.247: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
*Mar  1 00:13:52.015: Vi2 PPP: No authorization without authentication
*Mar  1 00:13:52.023: Vi2 CHAP: I CHALLENGE id 1 len 23 from "R2"
*Mar  1 00:13:52.031: Vi2 CHAP: Using hostname from interface CHAP
*Mar  1 00:13:52.031: Vi2 CHAP: Using password from interface CHAP
*Mar  1 00:13:52.031: Vi2 CHAP: O RESPONSE id 1 len 26 from "FLASH"
*Mar  1 00:13:52.083: Vi2 CHAP: I SUCCESS id 1 len 4
*Mar  1 00:13:53.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
*Mar  1 00:14:13.827: %DHCP-6-ADDRESS_ASSIGN: Interface Dialer1 assigned DHCP address 192.168.1.7, mask 255.255.255.0, hostname R1          
      
                                                                                                                                                 
R1(config-if)#do u all
Port Statistics for unclassified packets is not turned on.

All possible debugging has been turned off

R1(config-if)#do sh ip int br
Interface                  IP-Address      OK? Method Status                Protocol
Dialer1                    192.168.1.7     YES DHCP   up                    up   
FastEthernet0              unassigned      YES unset  up                    up   
Serial0                    unassigned      YES unset  administratively down down
Serial1                    unassigned      YES unset  administratively down down
Virtual-Access1            unassigned      YES unset  up                    up   
Virtual-Access2            unassigned      YES unset  up                    up
  
R1(config-if)#do ping 192.168.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/20 ms




Next PostNewer Post Previous PostOlder Post Home

0 comments:

Post a Comment