3.2.6 Packet Tracer - Configuring PAP and CHAP Authentication

                              

I don't want to write so much. How about the process

target

 

Part 1: View route configuration

Part 2: configure PPP as encapsulation

Part 3: configure PPP authentication

background

In this exercise, you will practice configuring PPP encapsulation on a serial link. You will also configure PPP PAP authentication and PPP CHAP authentication.

Part 1: View route configuration

Step 1: view the running configuration on all routers.

When viewing the router configuration, note that both static and dynamic routes are used in the topology.

Step 2: test the connection between the computer and the Web server.

In PC and Laptop, ping the web server with 209.165.200.2. Both ping commands should succeed. Remember to give STP and EIGRP enough integration time.

Part 2: configure PPP as encapsulation

Step 1: configure R1 to use PPP encapsulation with R3.

 

Enter the following command on R1:

R1(config)# interface s0/0/0
R1(config-if)# encapsulation ppp

Step 2: configure R2 to use PPP encapsulation with R3.

Enter the appropriate command on R2:

R2(config)# interface s0/0/1
R2(config-if)# encapsulation ppp

Step 3: configure R3 to use PPP encapsulation with R1, R2, and ISP.

Enter the appropriate command on R3:

R3(config)# interface s0/0/0
R3(config-if)# encapsulation ppp
R3(config)# interface s0/0/1
R3(config-if)# encapsulation ppp
R3(config)# interface s0/1/0
R3(config-if)# encapsulation ppp

Step 4: configure the ISP to use PPP encapsulation with R3.

 

One. Click Internet cloud, and then click ISP. Enter the following command:

Router(config)# interface s0/0/0
Router(config-if)# encapsulation ppp

b. Exit the Internet cloud by clicking back in the upper left corner or pressing the Alt + left arrow.

Step 5: test the connection to the Web server.

PC and laptop should be able to ping the Web server on 209.165.200.2. This may take some time as the interface starts working again and EIGRP converges again.

Part 3: configure PPP authentication

Step 1: configure PPP PAP authentication between R1 and R3.

Note: you can use the keyword secret to better encrypt passwords instead of using the keyword password shown in the lesson.

One. Enter the following command in R1:

R1(config)# username R3 secret class
R1(config)# interface s0/0/0
R1(config-if)# ppp authentication pap
R1(config-if)# ppp pap sent-username R1 password cisco

b. Enter the following command in R3:

R3(config)# username R1 secret cisco
R3(config)# interface s0/0/0
R3(config-if)# ppp authentication pap
R3(config-if)# ppp pap sent-username R3 password class

Step 2: configure PPP PAP authentication between R2 and R3.

Repeat step 1 to configure authentication between R2 and R3 and change the user name as needed. Note that each password sent on each serial port matches the password expected by the peer router.

R2(config-if)# username R3 secret class
R2(config)# interface s0/0/1
R2(config-if)# ppp authentication pap
R2(config-if)# ppp pap sent-username R2 password cisco
R3(config-if)# username R2 secret cisco
R3(config)# interface s0/0/1
R3(config-if)# ppp authentication pap
R3(config-if)# ppp pap sent-username R3 password class

Step 3: configure PPP CHAP authentication between R3 and ISP.

One. Enter the following command in ISP. Host name as user name:

Router(config)# hostname ISP
ISP(config)# username R3 secret cisco
ISP(config)# interface s0/0/0
ISP(config-if)# ppp authentication chap

b. Enter the following command in R3. The password must match CHAP authentication:

R3(config)# username ISP secret cisco
R3(config)# interface serial0/1/0
R3(config-if)# ppp authentication chap

Step 4: test the connection between the computer and the Web server.

In PC and Laptop, ping the web server with 209.165.200.2. Both ping commands should succeed. Remember to give STP and EIGRP enough integration time.

Tags: Web Server

Posted on Wed, 24 Jun 2020 02:43:25 -0400 by Major Tom