Dans une architecture « Hub and spoke » Frame relay, les interfaces peuvent être configurées dans 4 modes de communication OSPF :

R1(config)#int s0/0
R1(config-if)#ip ospf network ?
broadcast       Specify OSPF broadcast multi-access network
non-broadcast       Specify OSPF NBMA network
point-to-multipoint Specify  OSPF point-to-multipoint network
point-to-point      Specify OSPF point-to-point network

Configuration de tous les routeurs en mode « point-to-mulitipoint »

R1#configure t
R1(config)#int s0/0
R1(config-if)#ip ospf network point-to-multipoint

Vérifications

R1#show ip ospf interface s0/0
Serial0/0 is up, line protocol is up
  Internet Address 10.1.1.1/24, Area 0
  Process ID 1, Router ID 1.1.1.1, Network Type POINT_TO_MULTIPOINT, Cost: 64
  Transmit Delay is 1 sec, State POINT_TO_MULTIPOINT,
  Timer intervals configured, Hello 5, Dead 20, Wait 20, Retransmit 5
    oob-resync timeout 40
    Hello due in 00:00:03
  Supports Link-local Signaling (LLS)
  Index 2/2, flood queue length 0
  Next 0x0(0)/0x0(0)
  Last flood scan length is 2, maximum is 2
  Last flood scan time is 0 msec, maximum is 4 msec
  Neighbor Count is 3, Adjacent neighbor count is 3
    Adjacent with neighbor 4.4.4.4
    Adjacent with neighbor 3.3.3.3
    Adjacent with neighbor 2.2.2.2
  Suppress hello for 0 neighbor(s)

Dans cette configuration, le routage des routeurs « spoke » converge vers le routeur « hub » , une route host (/32) est également ajoutée :

R1#show ip route ospf
O    2.0.0.0/8 [110/65] via 10.1.1.2, 00:01:47, Serial0/0
O    3.0.0.0/8 [110/65] via 10.1.1.3, 00:01:47, Serial0/0
O    4.0.0.0/8 [110/65] via 10.1.1.4, 00:01:47, Serial0/0
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O       10.1.1.2/32 [110/64] via 10.1.1.2, 00:01:47, Serial0/0
O       10.1.1.3/32 [110/64] via 10.1.1.3, 00:01:47, Serial0/0
O       10.1.1.4/32 [110/64] via 10.1.1.4, 00:01:47, Serial0/0

R2#show ip route ospf
O    1.0.0.0/8 [110/65] via 10.1.1.1, 00:02:15, Serial0/0
O    3.0.0.0/8 [110/129] via 10.1.1.1, 00:02:15, Serial0/0
O    4.0.0.0/8 [110/129] via 10.1.1.1, 00:02:15, Serial0/0
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O       10.1.1.3/32 [110/128] via 10.1.1.1, 00:02:15, Serial0/0
O       10.1.1.1/32 [110/64] via 10.1.1.1, 00:02:15, Serial0/0
O       10.1.1.4/32 [110/128] via 10.1.1.1, 00:02:15, Serial0/0

R3#show ip route ospf
O    1.0.0.0/8 [110/782] via 10.1.1.1, 00:02:32, Serial1/0
O    2.0.0.0/8 [110/846] via 10.1.1.1, 00:02:32, Serial1/0
O    4.0.0.0/8 [110/846] via 10.1.1.1, 00:02:32, Serial1/0
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O       10.1.1.2/32 [110/845] via 10.1.1.1, 00:02:32, Serial1/0
O       10.1.1.1/32 [110/781] via 10.1.1.1, 00:02:32, Serial1/0
O       10.1.1.4/32 [110/845] via 10.1.1.1, 00:02:32, Serial1/0

R4#show ip route ospf
O    1.0.0.0/8 [110/65] via 10.1.1.1, 00:02:50, Serial0/0
O    2.0.0.0/8 [110/129] via 10.1.1.1, 00:02:50, Serial0/0
O    3.0.0.0/8 [110/129] via 10.1.1.1, 00:02:50, Serial0/0
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O       10.1.1.2/32 [110/128] via 10.1.1.1, 00:02:50, Serial0/0
O       10.1.1.3/32 [110/128] via 10.1.1.1, 00:02:50, Serial0/0
O       10.1.1.1/32 [110/64] via 10.1.1.1, 00:02:50, Serial0/0

Dans une architecture « Hub and spoke » Frame relay, les interfaces peuvent être configurées dans 4 modes de communication OSPF :

R1(config)#int s0/0
R1(config-if)#ip ospf network ?
broadcast       Specify OSPF broadcast multi-access network
non-broadcast       Specify OSPF NBMA network
point-to-multipoint Specify  OSPF point-to-multipoint network
point-to-point      Specify OSPF point-to-point network

Configuration des interaces de  tous les routeurs en mode broadcast

R1#conf t
R1(config)#int s0/0
R1(config-if)#ip ospf network broadcast

Dans cette configuration, la découverte de voisins OSPF est automatique

Vérifications:

R1#show ip ospf interface s0/0
Serial0/0 is up, line protocol is up
  Internet Address 10.1.1.1/24, Area 0
  Process ID 1, Router ID 1.1.1.1, Network Type BROADCAST, Cost: 64
  Transmit Delay is 1 sec, State DR, Priority 255
  Designated Router (ID) 1.1.1.1, Interface address 10.1.1.1
  No backup designated router on this network
  Timer intervals configured, Hello 5, Dead 20, Wait 20, Retransmit 5
    oob-resync timeout 40
    Hello due in 00:00:03
  Supports Link-local Signaling (LLS)
  Index 2/2, flood queue length 0
  Next 0x0(0)/0x0(0)
  Last flood scan length is 1, maximum is 2
  Last flood scan time is 0 msec, maximum is 4 msec
  Neighbor Count is 3, Adjacent neighbor count is 3
    Adjacent with neighbor 2.2.2.2
    Adjacent with neighbor 3.3.3.3
    Adjacent with neighbor 4.4.4.4   
  Suppress hello for 0 neighbor(s)

R1#show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.2           0   FULL/DROTHER    00:00:19    10.1.1.2        Serial0/0
3.3.3.3           0   FULL/DROTHER    00:00:15    10.1.1.3        Serial0/0
4.4.4.4           0   FULL/DROTHER    00:00:16    10.1.1.4        Serial0/0

Dans ce mode, les routeurs « spoke » obtiennent les IP des autres « spoke » comme next hop, la configuration frame relay doit permettre d’atteindre tous les next hop

R1#show ip route ospf
O    2.0.0.0/8 [110/65] via 10.1.1.2, 00:03:59, Serial0/0
O    3.0.0.0/8 [110/65] via 10.1.1.3, 00:03:59, Serial0/0
O    4.0.0.0/8 [110/65] via 10.1.1.4, 00:03:59, Serial0/0

R2#show ip  route ospf
O    1.0.0.0/8 [110/65] via 10.1.1.1, 00:07:11, Serial0/0
O    3.0.0.0/8 [110/65] via 10.1.1.3, 00:07:11, Serial0/0
O    4.0.0.0/8 [110/65] via 10.1.1.4, 00:07:11, Serial0/0

R3#show ip route ospf
O    1.0.0.0/8 [110/782] via 10.1.1.1, 00:07:29, Serial1/0
O    2.0.0.0/8 [110/782] via 10.1.1.2, 00:07:29, Serial1/0
O    4.0.0.0/8 [110/782] via 10.1.1.4, 00:07:29, Serial1/0

R4#show ip route ospf
O    1.0.0.0/8 [110/65] via 10.1.1.1, 00:07:46, Serial0/0
O    2.0.0.0/8 [110/65] via 10.1.1.2, 00:07:46, Serial0/0
O    3.0.0.0/8 [110/65] via 10.1.1.3, 00:07:46, Serial0/0

Dans une architecture « Hub and spoke » Frame relay, les interfaces peuvent être configurées dans 4 modes de communication OSPF :

R1(config)#int s0/0
R1(config-if)#ip ospf network ?
broadcast       Specify OSPF broadcast multi-access network
non-broadcast       Specify OSPF NBMA network
point-to-multipoint Specify  OSPF point-to-multipoint network
point-to-point      Specify OSPF point-to-point network

Par défaut, les interfaces sérial sont en mode « Non-Broadcast »

Configuration basique de R1 (et des autres routeurs)

router ospf 1
 log-adjacency-changes
 network 1.1.1.1 0.0.0.0 area 0
 network 10.1.1.1 0.0.0.0 area 0

R1#show ip ospf interface s0/0
Serial0/0 is up, line protocol is up
  Internet Address 10.1.1.1/24, Area 0
  Process ID 1, Router ID 1.1.1.1, Network Type NON_BROADCAST, Cost: 64
  Transmit Delay is 1 sec, State WAITING, Priority 1
  No designated router on this network
  No backup designated router on this network
  Timer intervals configured, Hello 30, Dead 120, Wait 120, Retransmit 5
    oob-resync timeout 120
    Hello due in 00:00:12
    Wait time before Designated router selection 00:01:12
  Supports Link-local Signaling (LLS)
  Index 2/2, flood queue length 0
  Next 0x0(0)/0x0(0)
  Last flood scan length is 0, maximum is 0
  Last flood scan time is 0 msec, maximum is 0 msec
  Neighbor Count is 0, Adjacent neighbor count is 0
  Suppress hello for 0 neighbor(s)

Dans cette configuration, les voisins OSPF doivent être spécifiés sur le routeur hub :

R1#conf t
R1(config)#router ospf 1
R1(config-router)#
R1(config-router)#neighbor 10.1.1.2
R1(config-router)#neighbor 10.1.1.3
R1(config-router)#neighbor 10.1.1.4

Vérifications:

R1#show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.4           0   FULL/DROTHER    968 msec    10.1.1.4        Serial0/0
3.3.3.3           0   FULL/DROTHER    932 msec    10.1.1.3        Serial0/0
2.2.2.2           0   FULL/DROTHER    944 msec    10.1.1.2        Serial0/0

  
R1#show ip route ospf
O    2.0.0.0/8 [110/65] via 10.1.1.2, 00:00:45, Serial0/0
O    3.0.0.0/8 [110/65] via 10.1.1.3, 00:00:45, Serial0/0
O    4.0.0.0/8 [110/65] via 10.1.1.4, 00:00:45, Serial0/0

• Non-Broadcast Networks
• Broadcast Networks
  • Priority

• Point-to-Point Networks
• Point-to-Multipoint Networks

R1(config)#int s0/0
R1(config-if)#ip ospf network ?
  broadcast       Specify OSPF broadcast multi-access network
  non-broadcast       Specify OSPF NBMA network
  point-to-multipoint Specify  OSPF point-to-multipoint network
  point-to-point      Specify OSPF point-to-point network

Dans cette exemple une liaison de type point à point FrameRelay est configuré entre R2<->R1, et R3<->R1 , de la façon suivante

R1
interface Serial0/0.100 multipoint
 ip address 10.1.1.1 255.255.255.0
 frame-relay map ip 10.1.1.2 102 broadcast
 frame-relay map ip 10.1.1.3 103 broadcas

R2
interface Serial0/0
 ip address 10.1.1.2 255.255.255.0
 encapsulation frame-relay
 frame-relay map ip 10.1.1.1 201
 frame-relay map ip 10.1.1.3 201
 no frame-relay inverse-arp

R3
interface Serial1/0
 ip address 10.1.1.3 255.255.255.0
 encapsulation frame-relay
 frame-relay map ip 10.1.1.1 301
 frame-relay map ip 10.1.1.2 301
 no frame-relay inverse-arp

Une interface loopback est configurée sur chaque routeur

Configuration de RIP v2

Configuration classique, et très simple, sur chaque routeur

R1#conf t
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#no auto-summary
R1(config-router)#network 10.0.0.0
R1(config-router)#network 1.0.0.0

R2#conf t
R2(config)#router rip
R2(config-router)#version 2
R2(config-router)#no auto-summary
R2(config-router)#network 10.0.0.0
R2(config-router)#network 2.0.0.0

R3#conf t
R3(config)#router rip
R3(config-router)#version 2
R3(config-router)#no auto-summary
R3(config-router)#network 10.0.0.0
R3(config-router)#network 3.0.0.0

Vérifications :

R1#sho ip route rip
R    2.0.0.0/8 [120/1] via 10.1.1.2, 00:00:21, Serial0/0.100
R    3.0.0.0/8 [120/1] via 10.1.1.3, 00:00:09, Serial0/0.100

R2#show ip route rip
R    1.0.0.0/8 [120/1] via 10.1.1.1, 00:00:19, Serial0/0

R3#show ip route rip
R    1.0.0.0/8 [120/1] via 10.1.1.1, 00:00:08, Serial1/0

De part la nature de cette topologie « point à point », les routeurs R2 et R2 ne reçoivent pas correctement les informations de routage propagés par RIP

Raison du dysfonctionnement : SPLIT HORIZON est activé sur le routeur R1

R1#show ip interface s0/0.100
Serial0/0.100 is up, line protocol is up
  Internet address is 10.1.1.1/24
  Broadcast address is 255.255.255.255
  Address determined by non-volatile memory
  MTU is 1500 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Multicast reserved groups joined: 224.0.0.9
  Outgoing access list is not set
  Inbound  access list is not set
  Proxy ARP is enabled
  Local Proxy ARP is disabled
  Security level is default
  Split horizon is enabled
  ICMP redirects are always sent
  ICMP unreachables are always sent
  ICMP mask replies are never sent
  IP fast switching is enabled
  IP fast switching on the same interface is enabled
  IP Flow switching is disabled
  IP CEF switching is enabled
  IP CEF Fast switching turbo vector
  IP multicast fast switching is enabled
  IP multicast distributed fast switching is disabled
  IP route-cache flags are Fast, CEF
  Router Discovery is disabled
  IP output packet accounting is disabled
  IP access violation accounting is disabled
  TCP/IP header compression is disabled
  RTP/IP header compression is disabled
  Policy routing is disabled
  Network address translation is disabled
  BGP Policy Mapping is disabled

Correction : désactivation de « split horizon » sur R1

R1(config)#int s0/0.100
R1(config-subif)#no ip split-horizon 

Vérifications :

R1#show ip interface s0/0.100 | inc Spli
  Split horizon is disabled

R2#show ip route rip
R    1.0.0.0/8 [120/1] via 10.1.1.1, 00:00:09, Serial0/0
R    3.0.0.0/8 [120/2] via 10.1.1.3, 00:00:09, Serial0/0

Attention : R1 et R2 doivent pouvoir s’atteindre mutuellement (via R1) ,
il est donc nécessaire de faire évoluer la configuration :

R2#conf t
R2(config)#int s0/0
R2(config-if)#frame-relay map ip 10.1.1.3 201 

R3#conf t
R3(config)#int s1/0
R3(config-if)#frame-relay map ip 10.1.1.2 301 

• R1 est DTE
• R2 est DCE (clock rate)

Remarque :

dans cette configuration, en l’absence de nuage FrameRelay, l’envoie de paquets LMI doit être désactivé « no keepalive »
Un DLCI est utilisé entre R1 et R2, un autre entre R2 et R1 ( mais un seul DLCI aurait pu être utilisé)

Configuration

R1#show run int s0/1

interface Serial0/1
 ip address 200.1.1.1 255.255.255.0
 encapsulation frame-relay
 no keepalive
 frame-relay map ip 200.1.1.3 303
 frame-relay interface-dlci 113
end

R3#show run int s1/2

interface Serial1/2
 ip address 200.1.1.3 255.255.255.0
 encapsulation frame-relay
 no keepalive
 clock rate 64000
 frame-relay map ip 200.1.1.1 113
 frame-relay interface-dlci 303
end

Vérifications

R3#sh frame map
Serial1/2 (up): ip 200.1.1.1 dlci 113(0x71,0x1C10), static,
              CISCO

R3#debug frame-relay packet
Frame Relay packet debugging is on

*Mar  6 08:30:16.911: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:16.911: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:16.943: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:16.943: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:16.975: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:16.975: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:17.007: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:17.011: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:17.043: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:17.043: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:27.651: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104
*Mar  6 08:30:27.651: Serial1/2(o): dlci 113(0x1C11), pkt type 0x800(IP), datagramsize 104
*Mar  6 08:30:27.683: Serial1/2(i): dlci 303(0x48F1), pkt type 0x800, datagramsize 104

• Création de l’interface multilink
• Création de l’interface virtual-template
• Association du virtual-template aux interface dlci

Configuration

R1
interface Multilink12
 ip address 10.1.12.1 255.255.255.0
 ppp multilink
 ppp multilink group 12
!
interface Virtual-Template12
 no ip address
 ppp multilink group 12
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.12 multipoint
 frame-relay interface-dlci 102 ppp Virtual-Template12
 frame-relay interface-dlci 112 ppp Virtual-Template12
!

R2

interface Multilink21
 ip address 10.1.12.2 255.255.255.0
 ppp multilink
 ppp multilink group 21
!
interface Virtual-Template21
 no ip address
 ppp multilink group 21
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.201 point-to-point
 frame-relay interface-dlci 201 ppp Virtual-Template21
!
interface Serial0/0.211 point-to-point
 frame-relay interface-dlci 211 ppp Virtual-Template21
!

Vérifications

R1#show ppp multilink

Multilink12, bundle name is R2
  Endpoint discriminator is R2
  Bundle up for 00:07:26, total bandwidth 200000, load 1/255
  Receive buffer limit 24000 bytes, frag timeout 1000 ms
    0/0 fragments/bytes in reassembly list
    0 lost fragments, 0 reordered
    0/0 discarded fragments/bytes, 0 lost received
    0xC received sequence, 0xE sent sequence
  Member links: 2 active, 1 inactive (max not set, min not set)
    Vi3, since 00:06:27
    Vi2, since 00:05:22
    Vt12 (inactive)
No inactive multilink interfaces

R1#show ip int bri
Interface                  IP-Address      OK? Method Status                Protocol
Serial0/0                  unassigned      YES NVRAM  up                    up
Serial0/0.12               unassigned      YES unset  up                    up
Virtual-Access1            unassigned      YES unset  down                  down
Virtual-Access2            unassigned      YES TFTP   up                    up
Virtual-Access3            unassigned      YES TFTP   up                    up
Multilink12                10.1.12.1       YES manual up                    up
Virtual-Template12         unassigned      YES unset  down                  down

R1#show ip route con
     10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       10.1.12.2/32 is directly connected, Multilink12
C       10.1.12.0/24 is directly connected, Multilink12

R2#show ppp multilink

Multilink21, bundle name is R1
  Endpoint discriminator is R1
  Bundle up for 00:09:42, total bandwidth 200000, load 1/255
  Receive buffer limit 24000 bytes, frag timeout 1000 ms
    0/0 fragments/bytes in reassembly list
    1 lost fragments, 1 reordered
    1/168 discarded fragments/bytes, 0 lost received
    0x12 received sequence, 0x10 sent sequence
  Member links: 2 active, 1 inactive (max not set, min not set)
    Vi3, since 00:08:42
    Vi2, since 00:07:37
    Vt21 (inactive)
No inactive multilink interfaces

R2#show ip interface brief
Serial0/0                  unassigned      YES TFTP   up                    up
Serial0/0.201              unassigned      YES unset  up                    up
Serial0/0.211              unassigned      YES unset  up                    up
Virtual-Access1            unassigned      YES unset  down                  down
Virtual-Access2            unassigned      YES TFTP   up                    up
Virtual-Access3            unassigned      YES TFTP   up                    up
Multilink21                10.1.12.2       YES manual up                    up
Virtual-Template21         unassigned      YES unset  down                  down

Il est possible d’utiliser une interface de loopback :

• ip unnumbered Loopback

« Ip local policy route-map » peut être mis en place sur les routeurs Spoke afin d’atteindre les autres Spoke

Configuration

R1
interface Loopback0
 ip address 1.1.1.1 255.0.0.0
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
 frame-relay interface-dlci 102 ppp Virtual-Template1
 frame-relay interface-dlci 103 ppp Virtual-Template1
 frame-relay interface-dlci 104 ppp Virtual-Template1
!
interface Virtual-Template1
 ip unnumbered Loopback0

R2
interface Loopback0
 ip address 2.2.2.2 255.0.0.0
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
 frame-relay interface-dlci 201 ppp Virtual-Template2
!
interface Virtual-Template2
 ip unnumbered Loopback0
!
ip local policy route-map TEST
!
route-map TEST permit 10
 set ip next-hop 1.1.1.1
!
route-map TEST permit 20
!

Vérifications

R1# show ip route

C    1.0.0.0/8 is directly connected, Loopback0
     2.0.0.0/32 is subnetted, 1 subnets
C       2.2.2.2 is directly connected, Virtual-Access1
     3.0.0.0/32 is subnetted, 1 subnets
C       3.3.3.3 is directly connected, Virtual-Access2
     4.0.0.0/32 is subnetted, 1 subnets
C       4.4.4.4 is directly connected, Virtual-Access3

R2#show ip route

     1.0.0.0/32 is subnetted, 1 subnets
C       1.1.1.1 is directly connected, Virtual-Access1
C    2.0.0.0/8 is directly connected, Loopback0

R2#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 116/116/116 ms

FREEK (Frame Relay End to End Keepalive) permet de maintenir une session entre 2 routeurs

Plusieurs paramètres peuvent être ajusté :

• frame-relay end-to-end keepalive mode
  •  bidirectional Set bidirectional mode
  •  passive-reply Set passive-reply mode
  • reply Set unidirectional reply mode
  • request Set unidirectional request mode
• frame-relay end-to-end keepalive error-threshold
• frame-relay end-to-end keepalive succes-events
• frame-relay end-to-end keepalive timer
• frame-relay end-to-end keepalive event-windows

Configuration

R1
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.12 point-to-point
 ip address 10.1.12.1 255.255.255.0
 frame-relay interface-dlci 102  
  class TEST-KEEPALIVE
!
interface Serial0/0.13 point-to-point
 ip address 10.1.13.1 255.255.255.0
 frame-relay interface-dlci 103  
!
interface Serial0/0.14 point-to-point
 ip address 10.1.14.1 255.255.255.0
 frame-relay interface-dlci 104  
!
!
map-class frame-relay TEST-KEEPALIVE
 frame-relay end-to-end keepalive mode bidirectional
 frame-relay end-to-end keepalive timer recv 10
 frame-relay end-to-end keepalive event-window send 5
 frame-relay end-to-end keepalive event-window recv 5
 frame-relay end-to-end keepalive error-threshold send 3
 frame-relay end-to-end keepalive error-threshold recv 3
 frame-relay end-to-end keepalive success-events send 4
 frame-relay end-to-end keepalive success-events recv 4
!

R2
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.21 point-to-point
 ip address 10.1.12.2 255.255.255.0
 frame-relay interface-dlci 201  
 class TEST
!
!
map-class frame-relay TEST
 frame-relay end-to-end keepalive mode bidirectional
 frame-relay end-to-end keepalive timer recv 10
 frame-relay end-to-end keepalive event-window send 5
 frame-relay end-to-end keepalive event-window recv 5
 frame-relay end-to-end keepalive error-threshold send 3
 frame-relay end-to-end keepalive error-threshold recv 3
 frame-relay end-to-end keepalive success-events send 4
 frame-relay end-to-end keepalive success-events recv 4
!

• « callin » le challenge d’authentification est déclenché lors de l’appel entrant
• « send-username » spécifie les informations d’envoi

Configuration

R1
!
username R2 password 0 cisco12
username R4 password 0 cisco
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.12 point-to-point
 frame-relay interface-dlci 102 ppp Virtual-Template12
!
interface Serial0/0.13 point-to-point
 frame-relay interface-dlci 103 ppp Virtual-Template13
!
interface Serial0/0.14 point-to-point
 frame-relay interface-dlci 104 ppp Virtual-Template14
!
interface Serial0/1
 no ip address
 shutdown
!
interface Virtual-Template12
 ip address 10.1.12.1 255.255.255.0
 ppp authentication chap callin
 ppp chap hostname R1
!
interface Virtual-Template13
 ip address 10.1.13.1 255.255.255.0
 ppp pap sent-username R1 password 0 cisco13
!
interface Virtual-Template14
 ip address 10.1.14.1 255.255.255.0
 ppp authentication chap callin
 ppp pap sent-username R1-PAP password 0 ciscoPAP
!

R2
!
username R1 password 0 cisco12
!
interface Serial0/0.21 point-to-point
 frame-relay interface-dlci 201 ppp Virtual-Template21
!
interface Virtual-Template21
 ip address 10.1.12.2 255.255.255.0
 ppp chap hostname R2
!

R3
!
username R1 password 0 cisco13
!
interface Serial1/0.31 point-to-point
 frame-relay interface-dlci 301 ppp Virtual-Template31
!
interface Virtual-Template31
 ip address 10.1.13.3 255.255.255.0
 ppp authentication pap callin
!

R4
!
username R1-PAP password 0 ciscoPAP
username R1 password 0 cisco
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
!
interface Serial0/0.41 point-to-point
 frame-relay interface-dlci 401
!
interface Virtual-Template41
 ip address 10.1.14.4 255.255.255.0
 ppp authentication pap callin
!

Debug

R4#debug ppp authentication
PPP authentication debugging is on
R4#
*Mar  4 14:59:32.128: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar  4 14:59:32.128: Vi1 PPP: Using default call direction
*Mar  4 14:59:32.128: Vi1 PPP: Treating connection as a dedicated line
*Mar  4 14:59:32.128: Vi1 PPP: Session handle[EA000095] Session id[144]
*Mar  4 14:59:32.132: Vi1 PPP: Authorization required
*Mar  4 14:59:33.396: Vi1 PAP: I AUTH-REQ id 70 len 20 from "R1-PAP"
*Mar  4 14:59:33.396: Vi1 PAP: Authenticating peer R1-PAP
*Mar  4 14:59:33.400: Vi1 PPP: Sent PAP LOGIN Request
*Mar  4 14:59:33.400: Vi1 CHAP: I CHALLENGE id 23 len 23 from "R1"
*Mar  4 14:59:33.404: Vi1 PPP: Received LOGIN Response PASS
*Mar  4 14:59:33.408: Vi1 PPP: Sent LCP AUTHOR Request
*Mar  4 14:59:33.408: Vi1 PPP: Sent IPCP AUTHOR Request
*Mar  4 14:59:33.408: Vi1 CHAP: Using hostname from unknown source
*Mar  4 14:59:33.408: Vi1 CHAP: Using password from AAA
*Mar  4 14:59:33.408: Vi1 CHAP: O RESPONSE id 23 len 23 from "R4"
*Mar  4 14:59:33.412: Vi1 LCP: Received AAA AUTHOR Response PASS
*Mar  4 14:59:33.412: Vi1 IPCP: Received AAA AUTHOR Response PASS
*Mar  4 14:59:33.412: Vi1 PAP: O AUTH-ACK id 70 len 5
*Mar  4 14:59:33.436: Vi1 CHAP: I SUCCESS id 23 len 4
*Mar  4 14:59:33.440: Vi1 PPP: Sent IPCP AUTHOR Request
*Mar  4 14:59:34.440: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up