Table of Contents

1 NTP Configuration Guide· 1-1

NTP Client/Server Mode Configuration· 1-1

Network Diagram·· 1-1

Networking and Configuration Requirements· 1-1

Applicable Product Matrix· 1-1

Configuration Procedure· 1-2

Complete Configuration· 1-2

Precautions· 1-2

NTP Symmetric Peers Mode Configuration· 1-2

Network Diagram·· 1-2

Networking and Configuration Requirements· 1-2

Applicable Product Matrix· 1-3

Configuration Procedure· 1-3

Complete Configuration· 1-3

Precautions· 1-3

NTP Broadcast Mode Configuration· 1-4

Network Diagram·· 1-4

Networking and Configuration Requirements· 1-4

Applicable Product Matrix· 1-4

Configuration Procedure· 1-4

Complete Configuration· 1-5

Precautions· 1-5

NTP Multicast Mode Configuration· 1-6

Network Diagram·· 1-6

Networking and Configuration Requirements· 1-6

Applicable Product Matrix· 1-6

Configuration Procedure· 1-6

Complete Configuration· 1-7

Precautions· 1-7

NTP Client/Server Mode with Authentication Configuration· 1-7

Network Diagram·· 1-7

Networking and Configuration Requirements· 1-8

Applicable Product Matrix· 1-8

Configuration Procedure· 1-8

Complete Configuration· 1-9

Precautions· 1-9

 

NTP Client/Server Mode Configuration

Defined in RFC 1305, the Network Time Protocol (NTP) synchronizes timekeeping among distributed time servers and clients. NTP runs over the User Datagram Protocol (UDP), using UDP port 123.

The purpose of using NTP is to keep consistent timekeeping among all clock-dependent devices within the network so that the devices can provide diverse applications based on the consistent time.

For a local system running NTP, its time can be synchronized by other reference sources and can be used as a reference source to synchronize other clocks.

Network Diagram

Figure 1-1 Network diagram for NTP client/server mode configuration

 

Networking and Configuration Requirements

l          The local clock of Device A (switch) is to be used as a reference source, with the stratum level of 2.

l          Device B is an S3600 Ethernet switch, which takes Device A as the time server.

l          Set Device B to work in the client mode, and Device A will automatically work in the server mode.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series Ethernet switches	Release 1510, Release 1602	All versions
S5100-SI/EI series Ethernet switches	Release 2200, Release 2201	All versions
S3600-SI/EI series Ethernet switches	Release 1510, Release 1602	All versions
S3100-EI series Ethernet switches	Release 2104, Release 2107	All versions
S3100-C-SI series Ethernet switches S3100-T-SI series Ethernet switches	Release 0011, Release 2102, Release 2107	All versions
S3100-TP-SI series Ethernet switches	Release 2102, Release 2107	All versions( except S3100-52TP-SI)
S3100-52TP-SI	Release 2106, Release 2107	S3100-52TP-SI
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

# Set Device B to take Device A as the time server.

<DeviceB> system-view

[DeviceB] ntp-service unicast-server 1.0.1.11

# View NTP status of Device B.

[DeviceB] display ntp-service status

# View NTP session information of Device B.

[DeviceB] display ntp-service sessions

Complete Configuration

#

 ntp-service unicast-server 1.0.1.11

Precautions

The local clock of an H3C S3600/S5600/S3100-SI series Ethernet switch cannot be set as a reference clock. It can synchronize other devices as a reference clock only when its clock is synchronized.

NTP Symmetric Peers Mode Configuration

Network Diagram

Figure 1-2 Network diagram for NTP symmetric peers mode configuration

 

Networking and Configuration Requirements

l          The local clock of Device A is to be used as a reference source, with the stratum level of 2.

l          Device C is an S3600 Ethernet switch, which takes Device A as the time server, and Device A automatically works in the server mode.

l          The local clock of Device B is to be used as a reference source, with the stratum level of 1. Set Device B to take Device C as the symmetric-peer.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series Ethernet switches	Release 1510, Release 1602	All versions
S5100-SI/EI series Ethernet switches	Release 2200, Release 2201	All versions
S3600-SI/EI series Ethernet switches	Release 1510, Release 1602	All versions
S3100-EI series Ethernet switches	Release 2104, Release 2107	All versions
S3100-C-SI series Ethernet switches S3100-T-SI series Ethernet switches	Release 0011, Release 2102, Release 2107	All versions
S3100-TP-SI series Ethernet switches	Release 2102, Release 2107	All versions( except S3100-52TP-SI)
S3100-52TP-SI	Release 2106, Release 2107	S3100-52TP-SI
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

l          Configure Device C.

# Set Device A as the time server.

<DeviceC> system-view

[DeviceC] ntp-service unicast-server 3.0.1.31

l          Configure Device B (after Device C is synchronized to Device A).

# Set Device C as the symmetric-peer.

<DeviceB> system-view

[DeviceB] ntp-service unicast-peer 3.0.1.33

# View NTP status and NTP session information of Device C after clock synchronization.

[DeviceC] display ntp-service status

[DeviceC] display ntp-service sessions

Complete Configuration

l          Configuration on Device C.

#

ntp-service unicast-server 3.0.1.31

l          Configuration on Device B.

#

ntp-service unicast-peer 3.0.1.33

Precautions

The local clock of an H3C S3600/S5600/S3100-SI series Ethernet switch cannot be set as a reference clock. It can synchronize other devices as a reference clock only when its clock is synchronized.

NTP Broadcast Mode Configuration

Network Diagram

Figure 1-3 Network diagram for NTP broadcast mode configuration

 

Networking and Configuration Requirements

l          The local clock of Device C is to be used as a reference source, with the stratum level of 2. Set Device C to work in the broadcast server mode and send broadcasts through its VLAN-interface 2.

l          Device A and Device D are two S3600 Ethernet switches. Set Device A and Device D to work in the broadcast client mode and listen to broadcasts through their VLAN-interface 2 respectively.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series Ethernet switches	Release 1510, Release 1602	All versions
S5100-SI/EI series Ethernet switches	Release 2200, Release 2201	All versions
S3600-SI/EI series Ethernet switches	Release 1510, Release 1602	All versions
S3100-EI series Ethernet switches	Release 2104, Release 2107	All versions
S3100-C-SI series Ethernet switches S3100-T-SI series Ethernet switches	Release 0011, Release 2102, Release 2107	All versions
S3100-TP-SI series Ethernet switches	Release 2102, Release 2107	All versions( except S3100-52TP-SI)
S3100-52TP-SI	Release 2106, Release 2107	S3100-52TP-SI
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

l          Configure Device C.

# Set Device C to work as the broadcast sever and send broadcasts through its VLAN-interface 2.

<DeviceC> system-view

[DeviceC] interface Vlan-interface 2

[DeviceC-Vlan-interface2] ntp-service broadcast-server

l          Configure Device A (perform the same configuration on Device D).

# Set Device A to work as the broadcast client and listen broadcasts through its VLAN-interface 2.

<DeviceA> system-view

[DeviceA] interface Vlan-interface 2

[DeviceA-Vlan-interface2] ntp-service broadcast-client

l          View the NTP status and NTP session information of Device D after clock synchronization. (You can use the same command to view the NTP status and NTP session information of Device A)

# View NTP status of Device D.

[DeviceD] display ntp-service status

# View NTP session information of Device D.

[DeviceD] display ntp-service sessions

Complete Configuration

l          Configuration on Device C.

#

interface Vlan-interface2

 ip address 3.0.1.13 255.255.255.0

 ntp-service broadcast-server

l          Configuration on Device A.

#

interface Vlan-interface2

 ip address 3.0.1.11 255.255.255.0

 ntp-service broadcast-client

l          Configuration on Device D.

#

interface Vlan-interface2

 ip address 3.0.1.14 255.255.255.0

 ntp-service broadcast-client

Precautions

The local clock of an H3C S3600/S5600/S3100-SI series Ethernet switch cannot be set as a reference clock. It can synchronize other devices as a reference clock only when its clock is synchronized.

NTP Multicast Mode Configuration

Network Diagram

Figure 1-4 Network diagram for NTP multicast mode configuration

 

Networking and Configuration Requirements

l          The local clock of Device C is to be used as a reference source, with the stratum level of 2. Set Device C to work in the multicast server mode and send multicast through its VLAN-interface 2.

l          Device A and Device D are two S3600 Ethernet switches. Set Device A and Device D to work in the multicast client mode and listen to multicasts through their VLAN-interface 2 respectively.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series Ethernet switches	Release 1510, Release 1602	All versions
S5100-SI/EI series Ethernet switches	Release 2200, Release 2201	All versions
S3600-SI/EI series Ethernet switches	Release 1510, Release 1602	All versions
S3100-EI series Ethernet switches	Release 2104, Release 2107	All versions
S3100-C-SI series Ethernet switches S3100-T-SI series Ethernet switches	Release 0011, Release 2102, Release 2107	All versions
S3100-TP-SI series Ethernet switches	Release 2102, Release 2107	All versions( except S3100-52TP-SI)
S3100-52TP-SI	Release 2106, Release 2107	S3100-52TP-SI
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

l          Configure Device C.

# Set Device C to work as the multicast server and send multicasts through its VLAN-interface 2.

<DeviceC> system-view

[DeviceC] interface Vlan-interface 2

[DeviceC-Vlan-interface2] ntp-service multicast-server

l          Configure Device A (perform the same configuration on Device D).

# Set Device A to work as the multicast client and listen multicasts through its VLAN-interface 2.

<DeviceA> system-view

[DeviceA] interface Vlan-interface 2

[DeviceA-Vlan-interface2] ntp-service multicast-client

l          View the NTP status and NTP session information of Device D after clock synchronization (You can use the same command to view the NTP status and NTP session information of Device A).

# View NTP status of Device D.

[DeviceD] display ntp-service status

# View NTP session information of Device D.

[DeviceD] display ntp-service sessions

Complete Configuration

l          Configuration on Device C.

#

interface Vlan-interface2

 ip address 3.0.1.13 255.255.255.0

 ntp-service multicast-server

l          Configuration on Device A.

#

interface Vlan-interface2

 ip address 1.0.1.11 255.255.255.0

 ntp-service multicast-client

l          Configuration on Device D.

#

interface Vlan-interface2

 ip address 3.0.1.14 255.255.255.0

 ntp-service multicast-client

Precautions

The local clock of an H3C S3600/S5600/S3100-SI series Ethernet switch cannot be set as a reference clock. It can synchronize other devices as a reference clock only when its clock is synchronized.

NTP Client/Server Mode with Authentication Configuration

Network Diagram

Figure 1-5 Network diagram for NTP client/server mode with authentication configuration

 

Networking and Configuration Requirements

l          The local clock of Device A is to be used as a reference source, with the stratum level of 2.

l          Device B is an S3600 Ethernet switch, which takes Device A as the time server and works in the client mode. Device A automatically works in the server mode.

l          Configure NTP authentication between Device A and Device B.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series Ethernet switches	Release 1510, Release 1602	All versions
S5100-SI/EI series Ethernet switches	Release 2200, Release 2201	All versions
S3600-SI/EI series Ethernet switches	Release 1510, Release 1602	All versions
S3100-EI series Ethernet switches	Release 2104, Release 2107	All versions
S3100-C-SI series Ethernet switches S3100-T-SI series Ethernet switches	Release 0011, Release 2102, Release 2107	All versions
S3100-TP-SI series Ethernet switches	Release 2102, Release 2107	All versions( except S3100-52TP-SI)
S3100-52TP-SI	Release 2106, Release 2107	S3100-52TP-SI
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

l          Configure Device B.

# Set Device A as the time server.

<DeviceB> system-view

[DeviceB] ntp-service unicast-server 1.0.1.11

# Enable the NTP authentication function.

[DeviceB] ntp-service authentication enable

# Set MD5 key numbered 42, with the key content aNiceKey.

[DeviceB] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey

# Specify key 42 as a trusted key.

[DeviceB] ntp-service reliable authentication-keyid 42

[DeviceB] ntp-service unicast-server 1.0.1.11 authentication-keyid 42

l          Configure Device A.

# Enable the NTP authentication function.

<DeviceA> system-view

[DeviceA] ntp-service authentication enable

# Set MD5 key numbered 42, with the key content aNiceKey.

[DeviceA] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey

# Specify key 42 as a trusted key.

[DeviceA] ntp-service reliable authentication-keyid 42

Complete Configuration

l          Configuration on Device B.

#

 ntp-service authentication enable

 ntp-service authentication-keyid 42 authentication-mode md5 X&9#$^U(!:[Q=^Q`MAF4<1!!

 ntp-service reliable authentication-keyid 42

 ntp-service unicast-server 1.0.1.11

l          Configuration on Device A.

#

 ntp-service authentication enable

 ntp-service authentication-keyid 42 authentication-mode md5 X&9#$^U(!:[Q=^Q`MAF4<1!!

 ntp-service reliable authentication-keyid 42

Precautions

The local clock of an H3C S3600/S5600/S3100-SI series Ethernet switch cannot be set as a reference clock.