H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 508)

54-23
[AC B] ntp-service unicast-server 1.0.1.11 authentication-keyid 42
Before AC B can synchronize its clock to that of AC A, you need to enable NTP authentication for AC A.
Perform the following configuration on AC A:
# Enable NTP authentication.
[AC A] ntp-service authentication enable
# Set an authentication key.
[AC A] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as key as a trusted key.
[AC A] ntp-service reliable authentication-keyid 42
# View the NTP status of AC B after clock synchronization.
[AC B] display ntp-service status
Clock status: synchronized
Clock stratum: 3
Reference clock ID: 1.0.1.11
Nominal frequency: 100.0000 Hz
Actual frequency: 100.0000 Hz
Clock precision: 2^7
Clock offset: 0.0000 ms
Root delay: 31.00 ms
Root dispersion: 1.05 ms
Peer dispersion: 7.81 ms
Reference time: 14:53:27.371 UTC Apr 20 2007 (C6D94F67.5EF9DB22)
As shown above, AC B has been synchronized to AC A, and the clock stratum level of AC B is 3, while
that of AC A is 2.
# View the NTP session information of AC B, which shows that an association has been set up AC B
and AC A.
[AC B] display ntp-service sessions
source reference stra reach poll now offset delay disper
**************************************************************************
[12345] 1.0.1.11 127.127.1.0 2 63 64 3 -75.5 31.0 16.5
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
Configuring NTP Broadcast Mode with Authentication
Network requirements
z
AC A’s local clock is to be used as a reference source, with the stratum level of 3.
z
AC A works in the broadcast server mode and sends out broadcast messages from VLAN-interface
2.
z
AC B works in the broadcast client mode and receives broadcast messages through
VLAN-interface 2.
z
NTP authentication is enabled on both AC A and AC B.