H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 216)

201
Figure 62 Network diagram for configuration of NTP client/server mode with authentication
Configuration procedure
1. Set the IP address for each interface as shown in Figure 62 , and add interfaces to the same VLAN.
The configuration procedure is omitted.
2. Configuration on Device:
# Specify the local clock as the reference source, with the stratum level of 2.
system-view
[Device] ntp-service refclock-master 2
3. Configuration on SecBlade:
system-view
# Enable NTP authentication on SecBlade.
[SecBlade] ntp-service authentication enable
# Set an authentication key.
[SecBlade] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[SecBlade] ntp-service reliable authentication-keyid 42
# Specify Device as the NTP server of SecBlade.
[SecBlade] ntp-service unicast-server 1.0.1.11 authentication-keyid 42
Before SecBlade can synchronize its clock to that of Device, enable NTP authentication for Device.
Perform the following configuration on Device:
# Enable NTP authentication.
[Device] ntp-service authentication enable
# Set an authentication key.
[Device] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[Device] ntp-service reliable authentication-keyid 42
# View the NTP status of SecBlade after clock synchronization.
[SecBlade] display ntp-service status
Clock status: synchronized
Clock stratum: 3
Reference clock ID: 1.0.1.11
Nominal frequency: 64.0000 Hz
Actual frequency: 64.0000 Hz
Clock precision: 2^7
Clock offset: 0.0000 ms
Root delay: 31.00 ms