一.添加接口
每个路由器中添加2SA接口
二.配置IP地址
1.在r2和r3上创建MP
[r2]int Mp-group 0/0/0
[r2-Mp-group0/0/0]
[r3]int Mp-group 0/0/0
[r3-Mp-group0/0/0]2.把1中上的接口加入上一步创建的MP
[R2]int Serial 3/0/1
[R2-Serial3/0/1]ppp mp Mp-group 0/0/0
[R2]int Serial 4/0/0
[R2-Serial4/0/0]ppp mp Mp-group 0/0/0
[R3]int Serial 3/0/0
[R3-Serial3/0/0]ppp mp Mp-group 0/0/0
[R3]int Serial 3/0/1
[R3-Serial3/0/1]ppp mp Mp-group 0/0/0
3.进入serial接口中配置IP地址
1.r1，r2配置IP地址
[r1]interface Serial 3/0/0
[r1-Serial3/0/0]ip add 192.168.1.1 24
[r2]int s3/0/0
[r2-Serial3/0/0]ip add 192.168.1.2 24查看情况：
[r1]display ip interface brief
2.r2，r3的MP-GROUP 口配置IP地址
[r2]int Mp-group 0/0/0
[r2-Mp-group0/0/0]ip add 192.168.2.2 24
[r3]int Mp-group 0/0/0
[r3-Mp-group0/0/0]ip address 192.168.2.3 24
4.r2对r1的PPP进行单向chap验证
此时需要在r2上创建用于验证的用户
1.在 r2 上创建用于验证r1的用户，并在接口配置 chap 验证方式
[r2]aaa
[r2-aaa]lo
[r2-aaa]local-user jin p
[r2-aaa]local-user jin password c
[r2-aaa]local-user jin password cipher j123
Info: Add a new user.
[r2-aaa]lo
[r2-aaa]local-user jin se
[r2-aaa]local-user jin service-type ppp
[r2-aaa]int s3/0/0
[r2-Serial3/0/0]ppp a
[r2-Serial3/0/0]ppp authentication-mode chap
[r2-Serial3/0/0]2.在r1链接r2上面配置同于验证的用户名和密码
[r1]int s3/0/0
[r1-Serial3/0/0]ppp cha
[r1-Serial3/0/0]ppp chap u
[r1-Serial3/0/0]ppp chap user jin
[r1-Serial3/0/0]ppp ch
[r1-Serial3/0/0]ppp chap pa
[r1-Serial3/0/0]ppp chap password c
[r1-Serial3/0/0]ppp chap password cipher j123
[r1-Serial3/0/0]3.关闭r1，r2的ppp通道，检查是否通过
shut
undo shut
5.r2r3的PPP进行双向chap验证
1.r2主验证方 r3被验证方
[r2]aaa
[r2-aaa]lo
[r2-aaa]local-user jin p
[r2-aaa]local-user jin password ci
[r2-aaa]local-user jin password cipher j123
[r2-aaa]lo
[r2-aaa]local-user jin s
[r2-aaa]local-user jin service-type ppp
[r2-aaa]q
[r2]int s3/0/1
[r2-Serial3/0/1]ppp a
[r2-Serial3/0/1]ppp authentication-mode c
[r2-Serial3/0/1]ppp authentication-mode chap
[r2-Serial3/0/1]int s4/0/0
[r2-Serial4/0/0]ppp a
[r2-Serial4/0/0]ppp authentication-mode cha
[r2-Serial4/0/0]ppp authentication-mode chap
[r2-Serial4/0/0]
[r2-Serial4/0/0]q
2.r3主验证方 r2被验证方
[r2]ping 192.168.2.3
