H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 90)

6-22
# View the NTP session information of AC 1, which shows that an association has been set up between
AC 1 and AC 2.
[AC1-Vlan-interface3] display ntp-service sessions
source reference stra reach poll now offset delay disper
**************************************************************************
[1234] 3.0.1.31 127.127.1.0 2 255 64 26 -16.0 40.0 16.6
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
Configuring NTP Client/Server Mode with Authentication
Network requirements
z The local clock of Switch is to be configured as a reference source, with the stratum level of 2.
z AC works in the client mode and Switch is to be used as the NTP server of AC, with AC as the
client.
z NTP authentication is to be enabled on both Switch and AC.
Figure 6-11 Network diagram for configuration of NTP client/server mode with authentication
Vlan-int
1.0.1.11/24 Vlan-int
1.0.1.12/24
Switch AC
Configuration procedure
1) Configuration on Switch:
# Specify the local clock as the reference source, with the stratum level of 2.
system-view
[Switch] ntp-service refclcok-master 2
2) Configuration on AC:
system-view
# Enable NTP authentication on AC.
[AC] ntp-service authentication enable
# Set an authentication key.
[AC] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[AC] ntp-service reliable authentication-keyid 42
# Specify Switch as the NTP server.
[AC] ntp-service unicast-server 1.0.1.11 authentication-keyid 42
Before AC can synchronize its clock to that of Switch, you need to enable NTP authentication for
Switch.
Perform the following configuration on Switch:
# Enable NTP authentication.
[Switch] ntp-service authentication enable
# Set an authentication key.
[Switch] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[Switch] ntp-service reliable authentication-keyid 42