H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 91)

11-4
Item Description
Key 1
Key 2
Set NTP authentication key.
The NTP authentication feature should be enabled for a system running NTP
in a network where there is a high security demand. This feature enhances the
network security by means of client-server key authentication, which prohibits
a client from synchronizing with a device that has failed authentication.
You can set two authentication keys, each of which is composed of a key ID
and key string.
ID is the ID of a key.
Key string is a character string for MD5 authentication key.
NTP Server
1/Reference
Key ID
External
Reference
Source
NTP Server
2/Reference
Key ID
Specify the IP address of an NTP server, and configure the authentication key
ID used for the association with the NTP server. Only if the key provided by the
server is the same with the specified key will the device synchronize its time to
the NTP server.
You can configure two NTP servers. The clients will choose the optimal
reference source.
The IP address of an NTP server is a unicast address, and cannot be a
broadcast or a multicast address, or the IP address of the local clock source.
System Time Configuration Example
Network requirements
As shown in Figure 11-4 , the local clock of Device is set as the reference clock.
AC works in the client mode, and uses Device as the NTP server.
Configure NTP authentication on Device and AC.
Figure 11-4 Network diagram for configuring system time
Configuration procedure
1) Configure Device
# Configure the local clock as the reference clock, with the stratum of 2. Enable NTP authentication, set
the key ID to 24, and specify the created authentication key aNiceKey is a trusted key. (Configuration
omitted.)
2) Configure AC
# Configure Device as the NTP server of AC.
Select Device > System Time from the navigation tree, and then select the Net Time tab to
perform the configurations as shown in Figure 11-5 .