H3C Technologies H3C SecPath F1000-E - Manual (Page 132)

121
Figure 55 Network diagram
Configuration procedure
1. Set the IP address for each interface as shown in Figure 55 . (Details not shown.)
2. Configure SecPath C:
# Specify the local clock as the reference source, with the stratum level of 3.
system-view
[SecPathC] ntp-service refclock-master 3
# Configure NTP authentication.
[SecPathC] ntp-service authentication enable
[SecPathC] ntp-service authentication-keyid 88 authentication-mode md5 123456
[SecPathC] ntp-service reliable authentication-keyid 88
# Specify SecPath C as an NTP broadcast server, and specify an authentication key.
[SecPathC] interface GigabitEthernet 0/1
[SecPathC-GigabitEthernet0/1] ntp-service broadcast-server authentication-keyid 88
3. Configure SecPath D:
# Configure NTP authentication.
system-view
[SecPathD] ntp-service authentication enable
[SecPathD] ntp-service authentication-keyid 88 authentication-mode md5 123456
[SecPathD] ntp-service reliable authentication-keyid 88
# Configure SecPath D to operate in the NTP broadcast client mode.
[SecPathD] interface GigabitEthernet 0/1
[SecPathD-GigabitEthernet0/1] ntp-service broadcast-client
Now, SecPath D can receive broadcast messages through GigabitEthernet 0/1, and SecPath C
can send broadcast messages through GigabitEthernet 0/1. Upon receiving a broadcast
message from SecPath C, SecPath D synchronizes its clock to that of SecPath C.
# View the NTP status of SecPath D after clock synchronization.
[SecPathD-GigabitEthernet0/1] display ntp-service status
Clock status: synchronized
Clock stratum: 4
Reference clock ID: 3.0.1.31
Nominal frequency: 64.0000 Hz
GE0/1
1.0.1.10/24
SecPath A
GE0/1
3.0.1.31/24
GE0/1
3.0.1.32/24
SecPath B
SecPath C
SecPath D
GE0/1
1.0.1.11/24 GE0/2
3.0.1.30/24