Page 1 of 7
Configuring PPP
After completing this lab, you will be able to:
Configure OSPF routing on all routers
Configure PPP encapsulation on all serial interfaces
Configure secure PPP connections using authentication
In this exercise, you will open the packet tracer file titled 1.Configuring PPP use this instruction
set to complete the lab.
Topology
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
Fa0/0 192.168.0.1 255.255.255.0 N/A
COLUMBUS
S0/0/0 10.0.0.2 255.255.255.252 N/A
Lo0 100.0.0.1 255.255.255.248 N/A
RALEIGH S0/0/0 10.0.0.1 255.255.255.252 N/A
S0/0/1 10.0.0.5 255.255.255.252 N/A
Fa0/0 192.168.1.1 255.255.255.0 N/A
INDIANAPOLIS
S0/0/1 10.0.0.6 255.255.255.252 N/A
HOST1 NIC 192.168.0.254 255.255.255.0 192.168.0.1
HOST2 NIC 192.168.1.254 255.255.255.0 192.168.1.1
Page 2 of 7
Objective
In this lab, you will learn how to configure PPP encapsulation on serial links. You will also learn
how to restore serial links to their default HDLC encapsulation. Finally, you will configure PPP
PAP authentication and PPP CHAP authentication.
Activity
Task 1: Configure OSPF on the Routers
1. Enable OSPF routing on COLUMBUS, RALEIGH, and INDIANAPOLIS.
Issue the router OSPF command with a process ID of 1 to enter router configuration mode. For
each router, advertise all the attached networks.
COLUMBUS(config)#router OSPF 1
COLUMBUS(config-router)#network 192.168.0.0 0.0.0.255 area 1
COLUMBUS(config-router)#network 10.0.0.0 0.0.0.3 area 1
RALEIGH(config)#router OSPF 1
RALEIGH(config-router)#network 10.0.0.0 0.0.0.3 area 1
RALEIGH(config-router)#network 10.0.0.4 0.0.0.3 area 1
RALEIGH(config-router)#network 100.0.0.0 0.0.0.7 area 1
INDIANAPOLIS(config)#router OSPF 1
INDIANAPOLIS(config-router)#network 10.0.0.4 0.0.0.3 area 1
INDIANAPOLIS(config-router)#network 192.168.1.0 0.0.0.255 area 1
2. Verify that you have full network connectivity.
Use the show ip ospf neighbor, show ip route and ping commands to verify connectivity.
Task 2: Configure PPP Encapsulation on Serial Interfaces
1. Use the show interface command to check whether HDLC is the default serial
encapsulation.
Page 3 of 7
The default serial encapsulation on Cisco routers is HDLC. Use the show interface command on
any of the serial interfaces to view the current encapsulation.
INDIANAPOLIS#show interface s0/0/1
Serial0/0/1 is up, line protocol is up (connected)
Hardware is HD64570
Internet address is 10.0.0.6/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set, keepalive set (10 sec)
<output omitted>
If you check all the active serial interfaces, the encapsulation will be set to HDLC.
2. Change the encapsulation of the serial interfaces from HDLC to PPP.
Change the encapsulation type on the link between COLUMBUS and RALEIGH, and observe the
effects.
COLUMBUS(config)#interface s0/0/0
COLUMBUS(config-if)#encapsulation ppp
COLUMBUS(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to down
%OSPF-5-ADJCHG: Process 1, Nbr 100.0.0.1 on Serial0/0/0 from FULL to DOWN, Neighbor
Down: Interface down or detached
RALEIGH(config)#interface serial 0/0/0
RALEIGH(config-if)#encapsulation ppp
RALEIGH(config-if)#
What happens when one end of the serial link is encapsulated with PPP and the other end of
the link is encapsulated with HDLC?
What happens when PPP encapsulation is configured on each end of the serial link?
3. Using the appropriate commands, change the encapsulation from HDLC to PPP on both
ends of the serial link between RALEIGH and INDIANAPOLIS.
4. Verify that PPP is now the encapsulation on the serial interfaces.
INDIANAPOLIS#show interface s0/0/1
Serial0/0/1 is up, line protocol is up (connected)
Hardware is HD64570
Internet address is 10.0.0.6/30
Page 4 of 7
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
<output omitted>
What does LCP Open mean? What does Open: IPCP mean? Open CDPCP?
Task 3: Configure PPP Authentication
1. Configure PPP PAP authentication on the serial link between COLUMBUS and RALEIGH.
COLUMBUS(config)#username RALEIGH password cisco
COLUMBUS(config)#int s0/0/0
COLUMBUS(config-if)#ppp authentication pap
COLUMBUS(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to down
%OSPF-5-ADJCHG: Process 1, Nbr 100.0.0.1 on Serial0/0/0 from FULL to DOWN, Neighbor
Down: Interface down or detached
COLUMBUS(config-if)#ppp pap sent-username COLUMBUS password cisco
Why does OSPF report that the link is down?
RALEIGH(config)#username COLUMBUS password cisco
RALEIGH(config)#interface s0/0/0
RALEIGH(config-if)#ppp authentication pap
RALEIGH(config-if)#ppp pap sent-username RALEIGH password cisco
RALEIGH(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up
%OSPF-5-ADJCHG: Process 1, Nbr 192.168.0.1 on Serial0/0/0 from LOADING to FULL,
Loading Done
What happens when PPP PAP authentication is configured on both ends of the serial link?
Why is it preferable to use CHAP authentication on a PPP WAN connection versus PAP?
2. Configure PPP CHAP authentication on the serial link between RALEIGH and INDIANAPOLIS.
RALEIGH(config)#username INDIANAPOLIS password cisco
RALEIGH(config)#interface s0/0/1
RALEIGH(config-if)#ppp authentication chap
Page 5 of 7
RALEIGH(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to down
%OSPF-5-ADJCHG: Process 1, Nbr 192.168.1.1 on Serial0/0/1 from FULL to DOWN, Neigh-
bor Down: Interface down or detached
INDIANAPOLIS(config)#username RALEIGH password cisco
INDIANAPOLIS(config)#
INDIANAPOLIS(config)#interface s0/0/1
INDIANAPOLIS(config-if)#ppp authentication chap
INDIANAPOLIS(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to up
%OSPF-5-ADJCHG: Process 1, Nbr 100.0.0.1 on Serial0/0/1 from LOADING to FULL, Loading
Done
Task 5: Verify Connectivity
1. Ping the ISP (Lo1 interface on RALEIGH) from both hosts.
Take a snip of the output and paste into a Word document that will be submitted to your
instructor upon lab completion.
Task 6: Intentionally Break and Restore PPP CHAP Authentication
1. Break PPP CHAP authentication.
On the RALEIGH router, change the serial link between RALEIGH and INDIANAPOLIS, change the
authentication protocol on interface serial 0/0/1 to PAP. Then run the show ip eigrp neighbor
command to verify whether the link is still active.
RALEIGH(config)#int s0/0/1
RALEIGH(config-if)#ppp authentication pap
RALEIGH#
%SYS-5-CONFIG_I: Configured from console by console
Page 6 of 7
RALEIGH#show ip ospf neighbor
IP-OSPF neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 10.0.0.2 Se0/0/0 13 00:04:02 40 1000 0 54
1 10.0.0.6 Se0/0/1 11 00:01:54 40 1000 0 64
Can you still see the Indianapolis router as a neighbor? Is the link still Active?
RALEIGH#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]
RALEIGH#reload
After reloading, run the show ip ospf neighbor command.
Does changing the authentication protocol to PAP on interface serial 0/0/1 break
authentication between RALEIGH and INDIANAPOLIS?
2. Restore PPP CHAP authentication on the serial link.
Notice that it is not necessary to reload the router for this change to take effect.
RALEIGH(config)#int s0/0/1
RALEIGH(config-if)#ppp authentication chap
RALEIGH(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to up
%DUAL-5-NBRCHANGE: IP-OSPF 1: Neighbor 10.0.0.6 (Serial0/0/1) is up: new adjacency
3. Intentionally Break PPP CHAP authentication by changing the password on INDIANAPOLIS.
INDIANAPOLIS(config)#username RALEIGH password ciisco
INDIANAPOLIS(config)#^Z
INDIANAPOLIS#
%SYS-5-CONFIG_I: Configured from console by console
INDIANAPOLIS#sh ip ospf neighbor
IP-OSPF neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 10.0.0.5 Se0/0/1 11 00:05:17 40 1000 0 8
Is the connection still Active with Raleigh?
Page 7 of 7
INDIANAPOLIS#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]
INDIANAPOLIS#reload
INDIANAPOLIS#show interface s0/0/1
Serial0/0/1 is up, line protocol is down (disabled)
<output omitted>
What is the status of the connection to RALEIGH after reloading?
4. Restore PPP CHAP authentication by changing the password on INDIANAPOLIS.
INDIANAPOLIS(config)#username RALEIGH password cisco
INDIANAPOLIS(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to up
INDIANAPOLIS(config)#end
INDIANAPOLIS#
%SYS-5-CONFIG_I: Configured from console by console
INDIANAPOLIS#show interface s0/0/1
Serial0/0/1 is up, line protocol is up (connected)
<output omitted>
Note that the link has come back up. Test connectivity by pinging from HOST1 to HOST2.
