- 产品与解决方案
- 行业解决方案
- 服务
- 支持
- 合作伙伴
- 关于我们
38-PPP典型配置案例
本章节下载： 38-PPP典型配置案例 (186.31 KB)
目 录
本文档介绍PPP协议相关的典型配置举例。
本文档适用于使用Comware V9软件版本的路由器，如果使用过程中与产品实际情况有差异，请参考相关产品手册，或以设备实际情况为准。
本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
本文档假设您已了解了PPP、MP、PPPoE、DHCP协议。
如图1所示，设备Device A和Device B的Serial0/2/0和Serial0/2/1分别对应连接，使用MP-Group的方式建立MP链路，每个PPP链路使用CHAP进行认证。
图1 终端描述符捆绑MP组网图
本举例是在MSR2630E-X1设备的R9141P16版本上进行配置和验证的。
· 配置采用CHAP认证时两端的用户名和密码必须一致。
· Serial接口配置完成之后，需要执行undo shutdown命令开启接口。
· 创建PPP用户需要在local-user命令的class关键字后面选择network参数。
(1) 为Device B创建本地用户，设置本地用户的服务类型为PPP。
<DeviceA> system-view
[DeviceA] local-user userb class network
[DeviceA-luser-network-userb] password simple hello
[DeviceA-luser-network-userb] service-type ppp
[DeviceA-luser-network-userb] quit
(2) 配置串口Serial0/2/0，通过缺省的ISP域system对Rotuer B进行CHAP认证。
[DeviceA] interface serial 0/2/0
[DeviceA-Serial0/2/0] link-protocol ppp
[DeviceA-Serial0/2/0] ppp authentication-mode chap domain system
[DeviceA-Serial0/2/0] quit
(3) 配置串口Serial0/2/1，通过缺省的ISP域system对Rotuer B进行CHAP认证。
[DeviceA] interface Serial 0/2/1
[DeviceA-Serial0/2/1] link-protocol ppp
[DeviceA-Serial0/2/1] ppp authentication-mode chap domain system
[DeviceA-Serial0/2/1] quit
(4) 在系统缺省的ISP域system下，配置PPP用户使用本地认证方案。
[DeviceA] domain system
[DeviceA-isp-system] authentication ppp local
(5) 创建MP-group接口，配置相应的IP地址。
<DeviceA> system-view
[DeviceA] interface mp-group 0/0/1
[DeviceA-MP-group0/0/1] ip address 1.1.1.1 24
[DeviceA-MP-group0/0/1] quit
(6) 配置串口Serial0/2/0加入MP-Group 1并开启接口。
[DeviceA] interface serial 0/2/0
[DeviceA-Serial0/2/0] ppp mp mp-group 0/0/1
[DeviceA-Serial0/2/0] shutdown
[DeviceA-Serial0/2/0] undo shutdown
[DeviceA-Serial0/2/0] quit
(7) 配置串口Serial0/2/1加入MP-Group 1并开启接口。
[DeviceA] interface Serial 0/2/1
[DeviceA-Serial0/2/1] ppp mp mp-group 0/0/1
[DeviceA-Serial0/2/1] shutdown
[DeviceA-Serial0/2/1] undo shutdown
[DeviceA-Serial0/2/1] quit
(1) 配置串口Serial0/2/0，封装的链路层协议为PPP，并配置采用CHAP认证时Device B的用户名和设置缺省的CHAP认证密码。
<DeviceB> system-view
[DeviceB] interface serial 0/2/0
[DeviceB-Serial0/2/0] link-protocol ppp
[DeviceB-Serial0/2/0] ppp chap user userb
[DeviceB-Serial0/2/0] ppp chap password simple hello
[DeviceB-Serial0/2/0] quit
(2) 配置串口Serial0/2/1，封装的链路层协议为PPP，并配置采用CHAP认证时Device B的用户名和设置缺省的CHAP认证密码。
[DeviceB] interface Serial 0/2/1
[DeviceB-Serial0/2/1] link-protocol ppp
[DeviceB-Serial0/2/1] ppp chap user userb
[DeviceB-Serial0/2/1] ppp chap password simple hello
[DeviceB-Serial0/2/1] quit
(3) 创建MP-group接口，配置相应的IP地址。
[DeviceB] interface mp-group 0/0/1
[DeviceB-Mp-group1] ip address 1.1.1.2 24
[DeviceB-Mp-group1] quit
(4) 配置串口Serial0/2/0加入MP-Group 1并开启接口。
[DeviceB] interface serial 0/2/0
[DeviceB-Serial0/2/0] link-protocol ppp
[DeviceB-Serial0/2/0] ppp mp mp-group 0/0/1
[DeviceB-Serial0/2/0] shutdown
[DeviceB-Serial0/2/0] undo shutdown
[DeviceB-Serial0/2/0] quit
(5) 配置串口Serial0/2/1加入MP-Group 1并开启接口。
[DeviceB] interface Serial 0/2/1
[DeviceB-Serial0/2/1] link-protocol ppp
[DeviceB-Serial0/2/1] ppp mp mp-group 0/0/1
[DeviceB-Serial0/2/1] shutdown
[DeviceB-Serial0/2/1] undo shutdown
[DeviceB-Serial0/2/1] quit
(1) 在Device A上查看MP的相关信息。
Template: Mp-group0/0/1
max-bind: 16, fragment: enabled, min-fragment: 128
Master link: Mp-group0/0/1, Active members: 2, Bundle Multilink
Peer's endPoint descriptor: Mp-group0/0/1
Sequence format: long (rcv)/long (sent)
Bundle Up Time: 2014/07/22 16:51:40:835
0 lost fragments, 5 reordered, 0 unassigned, 0 interleaved
Sequence: 4 (rcv)/5 (sent)
Active member channels: 2 members
Serial0/2/0 Up-Time:2014/07/22 16:51:40:836
Serial0/2/1 Up-Time:2014/07/22 16:51:53:542
(2) 在Device A上查看MP-group0/0/1接口的相关信息。
[DeviceA] display interface mp-group 0/0/1
MP-group0/0/1
Current state: UP
Line protocol state: UP
Description: MP-group0/0/1 Interface
Bandwidth: 128kbps
Maximum Transmit Unit: 1500
Hold timer: 10 seconds
Internet Address is 1.1.1.1/24 Primary
Link layer protocol: PPP
LCP: opened, MP: opened, IPCP: opened
Physical: MP, baudrate: 128000 bps
Output queue - Urgent queuing: Size/Length/Discards 0/100/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Last 300 seconds input rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec
Last 300 seconds output rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec
Input: 8 packets, 466 bytes, 0 drops
Output: 8 packets, 456 bytes, 0 drops
(3) 在DeviceA上ping对端IP地址。
Ping 1.1.1.2 (1.1.1.2): 56 data bytes, press CTRL_C to break
56 bytes from 1.1.1.2: icmp_seq=0 ttl=255 time=25.749 ms
56 bytes from 1.1.1.2: icmp_seq=1 ttl=255 time=25.751 ms
56 bytes from 1.1.1.2: icmp_seq=2 ttl=255 time=25.521 ms
56 bytes from 1.1.1.2: icmp_seq=3 ttl=255 time=25.512 ms
56 bytes from 1.1.1.2: icmp_seq=4 ttl=255 time=25.599 ms
--- Ping statistics for 1.1.1.2 ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms
<DeviceA>%Jul 22 17:08:22:460 2014 DeviceA PING/6/PING_STATISTICS: Ping statisti
cs for 1.1.1.2: 5 packets transmitted, 5 packets received, 0.0% packet loss, rou
nd-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms.
· Device A：
#
interface Serial0/2/0
ppp authentication-mode chap domain system
ppp mp MP-group0/0/1
#
interface Serial0/2/1
ppp authentication-mode chap domain system
ppp mp MP-group0/0/1
#
interface MP-group0/0/1
ip address 1.1.1.1 255.255.255.0
#
local-user 123 class network
password cipher $c$3$5ulb/vg58eiBIm5EnilnsZ2cS2Cmwg==
service-type ppp
authorization-attribute user-role network-operator
#
· Device B：
#
interface Serial0/2/0
ppp chap password cipher $c$3$4kD4T3bLZ/lngijhEKIS70/oTbNSkw==
ppp chap user 123
ppp mp MP-group0/0/1
#
interface Serial0/2/1
ppp chap password cipher $c$3$mVlcV3W+YQBgmxKePKpZV9tTcaFhXg==
ppp chap user 123
ppp mp MP-group0/0/1
#
interface MP-group0/0/1
ip address 1.1.1.2 255.255.255.0
#
· 《H3C MSR1000[2600][3600]路由器 配置指导(V9)》中的“二层技术-广域网接入配置指导”
· 《H3C MSR1000[2600][3600]路由器 命令参考(V9)》中的“二层技术-广域网接入命令参考”
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!
支持
