- Table of Contents
-
- H3C MSR1000[2600][3600] Routers Configuration Examples All-in-One-R9141-6W100
- 00-Preface
- 01-Local 802.1X Authentication Configuration Examples
- 02-RADIUS-Based 802.1X Authentication Configuration Examples
- 03-AAA Configuration Examples
- 04-ACL Configuration Examples
- 05-MPLS over ADVPN Configuration Examples
- 06-ARP Attack Protection Configuration Examples
- 07-BFD Configuration Examples
- 08-Basic BGP Configuration Examples
- 09-BGP Route Attribute-Based Route Selection Configuration Examples
- 10-EAA Monitor Policy Configuration Examples
- 11-GRE with OSPF Configuration Examples
- 12-HoVPN Configuration Examples
- 13-IGMP Snooping Configuration Examples
- 14-IGMP Configuration Examples
- 15-IPsec Configuration Examples
- 16-IPsec Digital Certificate Authentication Configuration Examples
- 17-IPv6 IS-IS Configuration Examples
- 18-IPv6 over IPv4 GRE Tunnel Configuration Examples
- 19-IPv6 over IPv4 Manual Tunnel with OSPFv3 Configuration Examples
- 20-IS-IS Configuration Examples
- 21-Combined ISATAP Tunnel and 6to4 Tunnel Configuration Examples
- 22-L2TP over IPsec Configuration Examples
- 23-Multi-Instance L2TP Configuration Examples
- 24-L2TP Multidomain Access Configuration Examples
- 25-MPLS L3VPN Configuration Examples
- 26-MPLS OAM Configuration Examples
- 27-MPLS TE Configuration Examples
- 28-Basic MPLS Configuration Examples
- 29-NAT DNS Mapping Configuration Examples
- 30-NetStream Configuration Examples
- 31-NQA Configuration Examples
- 32-NTP Configuration Examples
- 33-OSPFv3 Configuration Examples
- 34-OSPF Configuration Examples
- 35-OSPF Multi-Process Configuration Examples
- 36-OSPF Multi-Instance Configuration Examples
- 37-Portal Configuration Examples
- 38-PPP Configuration Examples
- 39-RBAC Configuration Examples
- 40-RMON Configuration Examples
- 41-IPv4 NetStream Sampling Configuration Examples
- 42-SNMP Configuration Examples
- 43-SRv6 Configuration Examples
- 44-SSH Configuration Examples
- 45-Tcl Commands Configuration Examples
- 46-VLAN Configuration Examples
- 47-VRRP Configuration Examples
- 48-VXLAN over IPsec Configuration Examples
- 49-WLAN AC Configuration Examples
- 50-Small and Medium-Sized Store Configuration Examples
- 51-Cloudnet VPN Configuration Examples
- 52-Ethernet Link Aggregation Configuration Examples
- 53-Ethernet OAM Configuration Examples
- 54-Outbound Bidirectional NAT Configuration Examples
- 55-NAT Hairpin in C-S Mode Configuration Examples
- 56-Load Sharing NAT Server Configuration Examples
- 57-BIDIR-PIM Configuration Examples
- 58-Control Plane-Based QoS Policy Configuration Examples
- 59-Scheduling a Task Configuration Examples
- 60-Client-Initiated L2TP Tunnel Configuration Examples
- 61-LAC-Auto-Initiated L2TP Tunnel Configuration Examples
- 62-Authorized ARP Configuration Examples
- 63-GTS Configuration Examples
- 64-Traffic Policing Configuration Examples
- 65-Traffic Accounting Configuration Examples
- 66-Mobile Communication Modem Management Configuration Examples
- 67-Port Isolation Configuration Examples
- 68-PBR Configuration Examples
- 69-TFTP Client Software Upgrade Configuration Examples
- 70-FTP Client Software Upgrade Configuration Examples
- 71-FTP Server Software Upgrade Configuration Examples
- 72-Routing Policy Configuration Examples
- 73-Software Upgrade from the BootWare Menu Configuration Examples
- 74-Mirroring Configuration Examples
- Related Documents
-
Title | Size | Download |
---|---|---|
38-PPP Configuration Examples | 96.80 KB |
PPP Configuration Examples
Copyright © 2024 New H3C Technologies Co., Ltd. All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
The information in this document is subject to change without notice.
Contents
Introduction
The following information provides PPP protocol-related configuration examples.
Prerequisites
The following information applies to Comware 9-based router. Procedures and information in the examples might be slightly different depending on the software or hardware version of the routers.
The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
This document assumes that you have basic knowledge of PPP, MP, PPPoE, and DHCP.
Example: Configuring MP+CHAP
Network configuration
As shown in Figure 1, Serial 0/2/0 and Serial 0/2/1 of Device A are connected to Serial 0/2/0 and Serial 0/2/1 of Device B, respectively. Set up an MP link in MP-group mode. Each PPP link uses CHAP for authentication.
Software versions used
This configuration example was created and verified on R9141P16 of the MSR2630E-X1 device.
Restrictions and guidelines
· Make sure the username and password for CHAP authentication are the same on both ends.
· After a serial interface is configured, you must use the undo shutdown command to bring up the interface.
· When creating a PPP user, you must specify the network option after the class keyword in the local-user command.
Procedures
Configuring Device A
1. Create a local user for Device B, and set the service type to PPP for the local user.
<DeviceA> system-view
[DeviceA] local-user userb class network
[DeviceA-luser-network-userb] password simple hello
[DeviceA-luser-network-userb] service-type ppp
[DeviceA-luser-network-userb] quit
2. Configure serial interface Serial 0/2/0, and use the default ISP domain system to perform CHAP authentication for Device B.
[DeviceA] interface serial 0/2/0
[DeviceA-Serial0/2/0] link-protocol ppp
[DeviceA-Serial0/2/0] ppp authentication-mode chap domain system
[DeviceA-Serial0/2/0] quit
3. Configure serial interface Serial 0/2/1, and use the default ISP domain system to perform CHAP authentication for Device B.
[DeviceA] interface serial 0/2/1
[DeviceA-Serial0/2/1] link-protocol ppp
[DeviceA-Serial0/2/1] ppp authentication-mode chap domain system
[DeviceA-Serial0/2/1] quit
4. In the default ISP domain system, configure PPP users to use local authentication.
[DeviceA] domain system
[DeviceA-isp-system] authentication ppp local
5. Create an MP-group interface, and assign an IP address to it.
<DeviceA> system-view
[DeviceA] interface mp-group 0/0/1
[DeviceA-MP-group0/0/1] ip address 1.1.1.1 24
[DeviceA-MP-group0/0/1] quit
6. Assign serial interface Serial 0/2/0 to MP-group 1, and bring up the interface.
[DeviceA] interface serial 0/2/0
[DeviceA-Serial0/2/0] ppp mp mp-group 0/0/1
[DeviceA-Serial0/2/0] shutdown
[DeviceA-Serial0/2/0] undo shutdown
[DeviceA-Serial0/2/0] quit
7. Assign serial interface Serial 0/2/1 to MP-group 1, and bring up the interface.
[DeviceA] interface Serial 0/2/1
[DeviceA-Serial0/2/1] ppp mp mp-group 0/0/1
[DeviceA-Serial0/2/1] shutdown
[DeviceA-Serial0/2/1] undo shutdown
[DeviceA-Serial0/2/1] quit
Configuring Device B
1. Configure serial interface Serial 0/2/0, and enable PPP encapsulation on the interface. Configure the username and password for CHAP authentication on the interface.
<DeviceB> system-view
[DeviceB] interface serial 0/2/0
[DeviceB-Serial0/2/0] link-protocol ppp
[DeviceB-Serial0/2/0] ppp chap user userb
[DeviceB-Serial0/2/0] ppp chap password simple hello
[DeviceB-Serial0/2/0] quit
2. Configure serial interface Serial 0/2/1, and enable PPP encapsulation on the interface. Configure the username and password for CHAP authentication on the interface.
[DeviceB] interface Serial 0/2/1
[DeviceB-Serial0/2/1] link-protocol ppp
[DeviceB-Serial0/2/1] ppp chap user userb
[DeviceB-Serial0/2/1] ppp chap password simple hello
[DeviceB-Serial0/2/1] quit
3. Create an MP-group interface, and assign an IP address to it.
[DeviceB] interface mp-group 0/0/1
[DeviceB-Mp-group1] ip address 1.1.1.2 24
[DeviceB-Mp-group1] quit
4. Assign serial interface Serial 0/2/0 to MP-group 1, and bring up the interface.
[DeviceB] interface serial 0/2/0
[DeviceB-Serial0/2/0] link-protocol ppp
[DeviceB-Serial0/2/0] ppp mp mp-group 0/0/1
[DeviceB-Serial0/2/0] shutdown
[DeviceB-Serial0/2/0] undo shutdown
[DeviceB-Serial0/2/0] quit
5. Assign serial interface Serial 0/2/1 to MP-group 1, and bring up the interface.
[DeviceB] interface Serial 0/2/1
[DeviceB-Serial0/2/1] link-protocol ppp
[DeviceB-Serial0/2/1] ppp mp mp-group 0/0/1
[DeviceB-Serial0/2/1] shutdown
[DeviceB-Serial0/2/1] undo shutdown
Verifying the configuration
1. Display the MP information of Device A.
Template: Mp-group0/0/1
max-bind: 16, fragment: enabled, min-fragment: 128
Master link: Mp-group0/0/1, Active members: 2, Bundle Multilink
Peer's endPoint descriptor: Mp-group0/0/1
Sequence format: long (rcv)/long (sent)
Bundle Up Time: 2014/07/22 16:51:40:835
0 lost fragments, 5 reordered, 0 unassigned, 0 interleaved
Sequence: 4 (rcv)/5 (sent)
Active member channels: 2 members
Serial0/2/0 Up-Time:2014/07/22 16:51:40:836
Serial0/2/1 Up-Time:2014/07/22 16:51:53:542
2. Display information about interface MP-group 0/0/1 on Device A.
[DeviceA] display interface mp-group 0/0/1
MP-group0/0/1
Current state: UP
Line protocol state: UP
Description: MP-group0/0/1 Interface
Bandwidth: 128kbps
Maximum Transmit Unit: 1500
Hold timer: 10 seconds
Internet Address is 1.1.1.1/24 Primary
Link layer protocol: PPP
LCP: opened, MP: opened, IPCP: opened
Physical: MP, baudrate: 128000 bps
Output queue - Urgent queuing: Size/Length/Discards 0/100/0
Output queue - Protocol queuing: Size/Length/Discards 0/500/0
Output queue - FIFO queuing: Size/Length/Discards 0/75/0
Last clearing of counters: Never
Last 300 seconds input rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec
Last 300 seconds output rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec
Input: 8 packets, 466 bytes, 0 drops
Output: 8 packets, 456 bytes, 0 drops
3. Ping the peer IP address from Device A.
Ping 1.1.1.2 (1.1.1.2): 56 data bytes, press CTRL_C to break
56 bytes from 1.1.1.2: icmp_seq=0 ttl=255 time=25.749 ms
56 bytes from 1.1.1.2: icmp_seq=1 ttl=255 time=25.751 ms
56 bytes from 1.1.1.2: icmp_seq=2 ttl=255 time=25.521 ms
56 bytes from 1.1.1.2: icmp_seq=3 ttl=255 time=25.512 ms
56 bytes from 1.1.1.2: icmp_seq=4 ttl=255 time=25.599 ms
--- Ping statistics for 1.1.1.2 ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms
<DeviceA>%Jul 22 17:08:22:460 2014 DeviceA PING/6/PING_STATISTICS: Ping statisti
cs for 1.1.1.2: 5 packets transmitted, 5 packets received, 0.0% packet loss, rou
nd-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms.
Configuration files
· Device A:
#
interface Serial0/2/0
ppp authentication-mode chap domain system
ppp mp MP-group0/0/1
#
interface Serial0/2/1
ppp authentication-mode chap domain system
ppp mp MP-group0/0/1
#
interface MP-group0/0/1
ip address 1.1.1.1 255.255.255.0
#
local-user 123 class network
password cipher $c$3$5ulb/vg58eiBIm5EnilnsZ2cS2Cmwg==
service-type ppp
authorization-attribute user-role network-operator
#
· Device B:
#
interface Serial0/2/0
ppp chap password cipher $c$3$4kD4T3bLZ/lngijhEKIS70/oTbNSkw==
ppp chap user 123
ppp mp MP-group0/0/1
#
interface Serial0/2/1
ppp chap password cipher $c$3$mVlcV3W+YQBgmxKePKpZV9tTcaFhXg==
ppp chap user 123
ppp mp MP-group0/0/1
#
interface MP-group0/0/1
ip address 1.1.1.2 255.255.255.0
#
Related documentation
· Layer 2—WAN Access Configuration Guide in H3C MSR1000[2600][3600] Routers Configuration Guides (V9)
· Layer 2—WAN Access Command Reference in H3C MSR1000[2600][3600] Routers Command References (V9)