Configuring MLPPP over Frame-relay:

Configuring MLPPP over Frame-relay:

 ·         In this post, let me configure MLPPP over Frame-relay.

  ·         Let me take a small topology to configure MLPPP over Frame-relay:

Configuration:

 

R1#show run

!

!

interface Multilink1

 ip address 10.1.1.1 255.255.255.0

 ppp multilink

 ppp multilink group 1

!

!

interface Serial1/0

 no ip address

 encapsulation frame-relay

 serial restart-delay 0

 frame-relay interface-dlci 102 ppp Virtual-Template1

 no frame-relay inverse-arp

!

interface Serial1/1

 no ip address

 encapsulation frame-relay

 serial restart-delay 0

 frame-relay interface-dlci 103 ppp Virtual-Template1

 no frame-relay inverse-arp

!

!

interface Virtual-Template1

 no ip address

 ppp multilink

 ppp multilink group 1

!

R2# show run

!

interface Multilink1

 ip address 10.1.1.2 255.255.255.0

 ppp multilink

 ppp multilink group 1

!

interface Serial1/0

 no ip address

 encapsulation frame-relay

 serial restart-delay 0

 frame-relay interface-dlci 201 ppp Virtual-Template1

 no frame-relay inverse-arp

!

interface Serial1/1

 no ip address

 encapsulation frame-relay

 serial restart-delay 0

 frame-relay interface-dlci 301 ppp Virtual-Template1

 no frame-relay inverse-arp

!

interface Virtual-Template1

 no ip address

 ppp multilink

 ppp multilink group 1

!

 

R1#show ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

FastEthernet0/0            unassigned      YES unset  administratively down down

FastEthernet0/1            unassigned      YES unset  administratively down down

Serial1/0                  unassigned      YES unset  up                    up

Serial1/1                  unassigned      YES unset  up                    up

Serial1/2                  unassigned      YES unset  administratively down down

Serial1/3                  unassigned      YES unset  administratively down down

Multilink1                 10.1.1.1        YES manual up                    up

Virtual-Access1            unassigned      YES unset  up                    up

Virtual-Template1          unassigned      YES unset  down                  down

Virtual-Access2            unassigned      YES unset  down                  down

Virtual-Access3            unassigned      YES TFTP   up                    up

R1#

R1#ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/38/100 ms

R1#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/33/136 ms

R1#

 

R2#show ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

FastEthernet0/0            unassigned      YES unset  administratively down down

FastEthernet0/1            unassigned      YES unset  administratively down down

Serial1/0                  unassigned      YES unset  up                    up

Serial1/1                  unassigned      YES unset  up                    up

Serial1/2                  unassigned      YES unset  administratively down down

Serial1/3                  unassigned      YES unset  administratively down down

Multilink1                 10.1.1.2        YES manual up                    up

Virtual-Access1            unassigned      YES unset  up                    up

Virtual-Template1          unassigned      YES unset  down                  down

Virtual-Access2            unassigned      YES unset  down                  down

Virtual-Access3            unassigned      YES TFTP   up                    up

Virtual-Access4            unassigned      YES TFTP   down                  down

R2#

R2#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/30/72 ms

R2#

R2#ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/40/156 ms

R2#

 

Observations:

·         We first need to create multilink interface

·         IP address needs to be configured under multilink interface

·         Then, we need to tie this multilink interface to the virtual-template.

·         Then, we need to tie this virtual-template to the interfaces

PPP Multilink

PPP Multilink:

 

·         Multilink is simply bundling the links together.

·         Let me take a small topology to configure this one.

 

R1----s1/0---------------------s1/0------R2

R2----s1/1---------------------s1/1------R2

10.1.1.1---------------------------10.1.1.2

 

 

R1# show run

!

interface Multilink1

 ip address 10.1.1.1 255.255.255.0

 ppp multilink

 ppp multilink group 1

!

interface Serial1/0

 no ip address

 encapsulation ppp

 no peer default ip address

 serial restart-delay 0

 ppp multilink

 ppp multilink group 1

!

interface Serial1/1

 no ip address

 encapsulation ppp

 serial restart-delay 0

 ppp multilink

 ppp multilink group 1

!

R1#

 

R2#show run

!

interface Multilink1

 ip address 10.1.1.2 255.255.255.0

 ppp multilink

 ppp multilink group 1

!

!

interface Serial1/0

 no ip address

 encapsulation ppp

 serial restart-delay 0

 ppp multilink

 ppp multilink group 1

!

interface Serial1/1

 no ip address

 encapsulation ppp

 serial restart-delay 0

 ppp multilink

 ppp multilink group 1

!

 

R1#show ppp multilink active

 

Multilink1, bundle name is R2

  Endpoint discriminator is R2

  Bundle up for 00:02:59, total bandwidth 3088, load 1/255

  Receive buffer limit 24000 bytes, frag timeout 1000 ms

    0/0 fragments/bytes in reassembly list

    0 lost fragments, 15 reordered

    0/0 discarded fragments/bytes, 0 lost received

    0x41 received sequence, 0x41 sent sequence

  Member links: 2 active, 0 inactive (max not set, min not set)

    Se1/0, since 00:02:59

    Se1/1, since 00:02:53

R1#

 

R2#show ppp multilink active

 

Multilink1, bundle name is R1

  Endpoint discriminator is R1

  Bundle up for 00:03:18, total bandwidth 3088, load 1/255

  Receive buffer limit 24000 bytes, frag timeout 1000 ms

    0/0 fragments/bytes in reassembly list

    0 lost fragments, 16 reordered

    0/0 discarded fragments/bytes, 0 lost received

    0x43 received sequence, 0x43 sent sequence

  Member links: 2 active, 0 inactive (max not set, min not set)

    Se1/0, since 00:03:18

    Se1/1, since 00:03:12

R2#

 

R1#show ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

FastEthernet0/0            unassigned      YES unset  administratively down down

FastEthernet0/1            unassigned      YES unset  administratively down down

Serial1/0                  unassigned      YES manual up                    up

Serial1/1                  unassigned      YES unset  up                    up

Serial1/2                  unassigned      YES unset  administratively down down

Serial1/3                  unassigned      YES unset  administratively down down

Multilink1                 10.1.1.1        YES manual up                    up

R1#

R1#ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/19/64 ms

R1#

 

R2#show ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

FastEthernet0/0            unassigned      YES unset  administratively down down

FastEthernet0/1            unassigned      YES unset  administratively down down

Serial1/0                  unassigned      YES manual up                    up

Serial1/1                  unassigned      YES unset  up                    up

Serial1/2                  unassigned      YES unset  administratively down down

Serial1/3                  unassigned      YES unset  administratively down down

Multilink1                 10.1.1.2        YES manual up                    up

R2#

R2#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/29/72 ms

R2#

PPP: Authentication using CHAP

PPP: Authentication using CHAP

      ·         PPP supports 2 types of authentication, PAP and CHAP

·         PAP sends password in clear-text

·         CHAP sends password encrypted.

·         In this post, let me configure password using CHAP

·         Here, R1 is the server, Authenticator and R2 is the client, authentee.

·         We need to understand who is authenticating who.

·         When we dial-in for internet connection, the ISP authenticates the user, not the vice versa.

·         So, Server asks the password and the client shares it.

·         Let me take a small topology to configure this.

R1-----s1/0---------------------s1/0----R2

10.1.1.1----------------------------Client

R1(config)#username cisco password cisco

R1(config-if)#do show run int ser1/0

Building configuration...

 

Current configuration : 158 bytes

!

interface Serial1/0

 ip address 10.1.1.1 255.255.255.0

 encapsulation ppp

 no peer default ip address

 serial restart-delay 0

 ppp authentication chap

end

 

R1(config-if)#

 

R2(config-if)#do show run int ser1/0

Building configuration...

 

Current configuration : 157 bytes

!

interface Serial1/0

 ip address 10.1.1.2 255.255.255.0

 encapsulation ppp

 serial restart-delay 0

 ppp chap hostname cisco

 ppp chap password 0 cisco

end

 

R2(config-if)#

 

R1(config-if)#do debug ppp authentication

PPP authentication debugging is on

R1(config-if)#shut

R1(config-if)#

*Mar  1 02:48:54.611: %LINK-5-CHANGED: Interface Serial1/0, changed state to administratively down

*Mar  1 02:48:55.611: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to down

R1(config-if)#no shut

R1(config-if)#

*Mar  1 02:49:04.663: %LINK-3-UPDOWN: Interface Serial1/0, changed state to up

R1(config-if)#

*Mar  1 02:49:04.667: Se1/0 PPP: Using default call direction

*Mar  1 02:49:04.667: Se1/0 PPP: Treating connection as a dedicated line

*Mar  1 02:49:04.667: Se1/0 PPP: Session handle[F6000023] Session id[36]

*Mar  1 02:49:04.671: Se1/0 PPP: Authorization required

*Mar  1 02:49:04.787: Se1/0 CHAP: O CHALLENGE id 1 len 23 from "R1"

*Mar  1 02:49:04.887: Se1/0 CHAP: I RESPONSE id 1 len 26 from "cisco"

*Mar  1 02:49:04.891: Se1/0 PPP: Sent CHAP LOGIN Request

*Mar  1 02:49:04.895: Se1/0 PPP: Received LOGIN Response PASS

*Mar  1 02:49:04.899: Se1/0 PPP: Sent LCP AUTHOR Request

*Mar  1 02:49:04.903: Se1/0 PPP: Sent IPCP AUTHOR Request

R1(config-if)#

*Mar  1 02:49:04.907: Se1/0 LCP: Received AAA AUTHOR Response PASS

*Mar  1 02:49:04.907: Se1/0 IPCP: Received AAA AUTHOR Response PASS

*Mar  1 02:49:04.911: Se1/0 CHAP: O SUCCESS id 1 len 4

*Mar  1 02:49:04.915: Se1/0 PPP: Sent CDPCP AUTHOR Request

*Mar  1 02:49:04.919: Se1/0 CDPCP: Received AAA AUTHOR Response PASS

*Mar  1 02:49:04.959: Se1/0 PPP: Sent IPCP AUTHOR Request

R1(config-if)#

*Mar  1 02:49:05.911: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R1(config-if)#

 

 

R2(config-if)#do debug ppp authentication

PPP authentication debugging is on

R2(config-if)#

*Mar  1 02:49:04.719: Se1/0 PPP: Authorization required

*Mar  1 02:49:04.727: Se1/0 PPP: No authorization without authentication

*Mar  1 02:49:04.727: Se1/0 CHAP: I CHALLENGE id 1 len 23 from "R1"

*Mar  1 02:49:04.735: Se1/0 CHAP: Using hostname from interface CHAP

*Mar  1 02:49:04.735: Se1/0 CHAP: Using password from interface CHAP

*Mar  1 02:49:04.735: Se1/0 CHAP: O RESPONSE id 1 len 26 from "cisco"

*Mar  1 02:49:04.923: Se1/0 CHAP: I SUCCESS id 1 len 4

R2(config-if)#

 

R1(config-if)#do show ip int bri ser1/0

Interface                  IP-Address      OK? Method Status                Protocol

Serial1/0                  10.1.1.1        YES manual up                    up

R1(config-if)#

R1(config-if)#do ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/24/60 ms

R1(config-if)#

 

R2(config-if)#do show ip int bri ser1/0

Interface                  IP-Address      OK? Method Status                Protocol

Serial1/0                  10.1.1.2        YES manual up                    up

R2(config-if)#

R2(config-if)#do ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/16/36 ms

R2(config-if)#

PPP: Authentication using PAP

PPP: Authentication using PAP

   ·         PPP supports 2 types of authentication, PAP and CHAP

·         PAP sends password in clear-text

·         CHAP sends password encrypted.

·         In this post, let me configure password using PAP

·         Here, R1 is the server, Authenticator and R2 is the client, authentee.

·         We need to understand who is authenticating who.

·         When we dial-in for internet connection, the ISP authenticates the user, not the vice versa.

·         So, Server asks the password and the client shares it.

      
       ·         Let me take a small topology to configure this.

 

R1-----s1/0---------------------s1/0----R2

10.1.1.1----------------------------Client

 

R1(config)#username cisco password cisco

R1(config-if)#do show run int ser1/0

Building configuration...

 

Current configuration : 157 bytes

!

interface Serial1/0

 ip address 10.1.1.1 255.255.255.0

 encapsulation ppp

 no peer default ip address

 serial restart-delay 0

 ppp authentication pap

end

 

R1(config-if)#

 

R2(config-if)#do show run int ser1/0

Building configuration...

 

Current configuration : 176 bytes

!

interface Serial1/0

 ip address 10.1.1.2 255.255.255.0

 encapsulation ppp

 serial restart-delay 0

 ppp authentication pap

 ppp pap sent-username cisco password 0 cisco

end

 

R2(config-if)#int ser1/0

 

R1(config-if)#do debug ppp authe

PPP authentication debugging is on

R1(config-if)#shut

R1(config-if)#

*Mar  1 02:37:24.763: %LINK-5-CHANGED: Interface Serial1/0, changed state to administratively down

*Mar  1 02:37:25.763: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to down

R1(config-if)#

R1(config-if)#no shut

R1(config-if)#

*Mar  1 02:37:36.555: %LINK-3-UPDOWN: Interface Serial1/0, changed state to up

*Mar  1 02:37:36.559: Se1/0 PPP: Using default call direction

*Mar  1 02:37:36.559: Se1/0 PPP: Treating connection as a dedicated line

*Mar  1 02:37:36.559: Se1/0 PPP: Session handle[8F000022] Session id[35]

*Mar  1 02:37:36.563: Se1/0 PPP: Authorization required

*Mar  1 02:37:36.687: Se1/0 PAP: I AUTH-REQ id 29 len 16 from "cisco"

*Mar  1 02:37:36.687: Se1/0 PAP: Authenticating peer cisco

*Mar  1 02:37:36.691: Se1/0 PPP: Sent PAP LOGIN Request

*Mar  1 02:37:36.695: Se1/0 PPP: Received LOGIN Response PASS

*Mar  1 02:37:36.699: Se1/0 PPP: Sent LCP AUTHOR Request

*Mar  1 02:37:36.703: Se1/0 PPP: Sent IPCP AUTHOR Request

R1(config-if)#

*Mar  1 02:37:36.711: Se1/0 LCP: Received AAA AUTHOR Response PASS

*Mar  1 02:37:36.711: Se1/0 IPCP: Received AAA AUTHOR Response PASS

*Mar  1 02:37:36.715: Se1/0 PAP: O AUTH-ACK id 29 len 5

*Mar  1 02:37:36.719: Se1/0 PPP: Sent CDPCP AUTHOR Request

*Mar  1 02:37:36.723: Se1/0 CDPCP: Received AAA AUTHOR Response PASS

*Mar  1 02:37:36.763: Se1/0 PPP: Sent IPCP AUTHOR Request

R1(config-if)#

*Mar  1 02:37:37.715: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R1(config-if)#do u all

All possible debugging has been turned off

R1(config-if)#

 

R2(config)#

*Mar  1 02:37:36.591: Se1/0 PPP: Authorization required

*Mar  1 02:37:36.599: Se1/0 PPP: No authorization without authentication

*Mar  1 02:37:36.599: Se1/0 PAP: Using hostname from interface PAP

*Mar  1 02:37:36.599: Se1/0 PAP: Using password from interface PAP

*Mar  1 02:37:36.599: Se1/0 PAP: O AUTH-REQ id 29 len 16 from "cisco"

*Mar  1 02:37:36.739: Se1/0 PAP: I AUTH-ACK id 29 len 5

R2(config)#do u all

All possible debugging has been turned off

R2(config)#do debug ppp authen

PPP authentication debugging is on

R2(config)#

 

·         TIP:

·         Be very careful before enabling the debugs, always do logging buffered.

·         console logging is heavy and you might lose the console connection.

·         I have experienced once in the INE mock exam!

 

R1#show ip int bri

*Mar  1 02:42:31.827: %SYS-5-CONFIG_I: Configured from console by console

R1#show ip int bri | exclu unassi

Interface                  IP-Address      OK? Method Status                Protocol

Serial1/0                  10.1.1.1        YES manual up                    up

R1#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/28/112 ms

R1#

R1#ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/29/60 ms

R1#

 

R2#show ip int bri | exclu unassi

Interface                  IP-Address      OK? Method Status                Protocol

Serial1/0                  10.1.1.2        YES manual up                    up

R2#

R2#ping 10.1.1.2

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/26/96 ms

R2#

R2#ping 10.1.1.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/26/64 ms

R2#