H3c-technologies H3C SecBlade NetStream Cards Manual de usuario descargar pdf (Pagina 216)

201

Figure 62 Network diagram for configuration of NTP client/server mode with authentication

Configuration procedure

1. Set the IP address for each interface as shown in Figure 62, and add interfaces to the same VLAN.

The configuration procedure is omitted.

2. Configuration on Device:

# Specify the local clock as the reference source, with the stratum level of 2.

<Device> system-view

[Device] ntp-service refclock-master 2

3. Configuration on SecBlade:

<SecBlade> system-view

# Enable NTP authentication on SecBlade.

[SecBlade] ntp-service authentication enable

# Set an authentication key.

[SecBlade] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey

# Specify the key as a trusted key.

[SecBlade] ntp-service reliable authentication-keyid 42

# Specify Device as the NTP server of SecBlade.

[SecBlade] ntp-service unicast-server 1.0.1.11 authentication-keyid 42

Before SecBlade can synchronize its clock to that of Device, enable NTP authentication for Device.

Perform the following configuration on Device:

# Enable NTP authentication.

[Device] ntp-service authentication enable

# Set an authentication key.

[Device] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey

# Specify the key as a trusted key.

[Device] ntp-service reliable authentication-keyid 42

# View the NTP status of SecBlade after clock synchronization.

[SecBlade] display ntp-service status

Clock status: synchronized

Clock stratum: 3

Reference clock ID: 1.0.1.11

Nominal frequency: 64.0000 Hz

Actual frequency: 64.0000 Hz

Clock precision: 2^7

Clock offset: 0.0000 ms

Root delay: 31.00 ms

1 2 ... 211 212 213 214 215 216 217 218 219 220 221 ... 348 349

Sin comentarios

H3c-technologies H3C SecBlade NetStream Cards Manual de usuario Pagina 216