11-Network Management and Monitoring Configuration Examples

00-S12500_NTP_Configuration_Examples

Chapters Download  (203.77 KB)

00-S12500_NTP_Configuration_Examples
Title Size Download
00-S12500_NTP_Configuration_Examples 203.77 KB

Contents

Introduction· 1

Prerequisites 1

General configuration restrictions and guidelines 1

Example: Configuring the NTP client/server mode· 2

Network requirements 2

Software version used· 2

Configuration restrictions and guidelines 2

Configuration procedures 2

Verifying the configuration· 3

Configuration files 3

Example: Configuring the NTP symmetric active/passive mode· 4

Network requirements 4

Software version used· 4

Configuration restrictions and guidelines 4

Configuration procedures 5

Verifying the configuration· 5

Configuration files 6

Example: Configuring the NTP broadcast mode· 6

Network requirements 6

Software version used· 7

Configuration restrictions and guidelines 7

Configuration procedures 7

Verifying the configuration· 8

Configuration files 9

Example: Configuring the NTP multicast mode· 9

Network requirements 9

Software version used· 10

Configuration restrictions and guidelines 10

Configuration procedures 10

Verifying the configuration· 12

Configuration files 12

Example: Configuring the NTP broadcast mode with authentication· 14

Network requirements 14

Software version used· 14

Configuration restrictions and guidelines 14

Configuration procedures 15

Verifying the configuration· 16

Configuration files 17

Example: Configuring the SNTP client/server mode· 18

Network requirements 18

Software version used· 18

Configuration restrictions and guidelines 18

Configuration procedures 18

Verifying the configuration· 19

Configuration files 19

Related documentation· 20

 


Introduction

This document provides NTP configuration examples.

NTP synchronizes timekeeping among distributed time servers and clients (defined in RFC 5905). NTP provides consistent timekeeping for all clock-dependent devices and applications within the network.

SNTP is a simplified version of NTP. It uses the same packet format and packet exchange procedure as NTP, but it provides faster synchronization at the price of time accuracy, and occupies fewer system resources. SNTP supports only the client/server mode. NTP supports the following association modes, as shown in Table 1.

Table 1 NTP association modes

Mode

Application scenario

Client/server

This mode is intended for configurations where devices of a higher stratum synchronize to devices with a lower stratum.

Symmetric active/passive

This mode is most often used between two or more servers with the same stratum to operate as a backup for one another. If a server fails to communicate with all the servers of a higher stratum, the server can synchronize to the servers of the same stratum.

Broadcast

Broadcast mode is intended for configurations where a broadcast server sends clock synchronization messages to synchronize clients in the same subnet.

Broadcast mode is less accurate than the client/server and symmetric active/passive modes because only the broadcast server sends clock synchronization messages.

Multicast

A multicast server can provide time synchronization for clients in the same subnet or in different subnets.

Multicast mode is less accurate than the client/server and symmetric active/passive modes.

 

Prerequisites

The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of NTP.

General configuration restrictions and guidelines

When you configure NTP, follow these restrictions and guidelines:

·     You cannot configure both NTP and SNTP on the same device.

·     For consistent system time on the device, configure NTP or SNTP only on one MDC if the device has multiple MDCs.

Example: Configuring the NTP client/server mode

Network requirements

As shown in Figure 1, configure NTP to meet the following requirements:

·     Switch A's local clock is a reference source, with the stratum level 2.

·     Switch B operates in client mode.

·     Switch A is the NTP server for Switch B.

Figure 1 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the NTP client/server mode, follow these restrictions and guidelines:

·     For the client to synchronize to the NTP server, a server must be synchronized by other devices or use its local clock as a reference source.

·     A client can synchronize to a server, but a server cannot synchronize to a client.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 1. (Details not shown.)

2.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Specify the local clock as the reference source, with the stratum level 2.

[SwitchA] ntp-service refclock-master 2

3.     Configure Switch B:

# Enable the NTP service.

<SwitchB> system-view

[SwitchB] ntp-service enable

# Specify Switch A as the NTP server of Switch B.

[SwitchB] ntp-service unicast-server 1.0.1.11

Verifying the configuration

# Display the NTP status on Switch B.

[SwitchB] display ntp-service status

 Clock status: synchronized                                                    

 Clock stratum: 3                                                              

 System peer: 1.0.1.11                                                         

 Local mode: client                                                             

 Reference clock ID: 1.0.1.11                                                  

 Leap indicator: 00                                                            

 Clock jitter: 0.000015 s                                                       

 Stability: 0.000 pps                                                          

 Clock precision: 2^-16                                                        

 Root delay: 0.93079 ms                                                         

 Root dispersion: 7949.87488 ms                                                

 Reference time: d3d3a1a7.57bcbf32  Mon, Aug 13 2012 15:54:15.342

The output shows that Switch B has synchronized to Switch A. The clock stratum level is 3 on Switch B and 2 on Switch A.

Configuration files

·     Switch A:

#

 ntp-service enable

#

 ntp-service refclock-master 2

#

·     Switch B:

#

 ntp-service enable

#

 ntp-service unicast-server 1.0.1.11

#

Example: Configuring the NTP symmetric active/passive mode

Network requirements

As shown in Figure 2, configure NTP to meet the following requirements:

·     Switch A's local clock is a reference source, with the stratum level 2.

·     Switch B operates in client mode and Switch A is the NTP server for Switch B.

·     Switch C operates in symmetric-active mode and Switch B is the passive peer of Switch C.

Figure 2 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the NTP symmetric active/passive mode, follow these restrictions and guidelines:

·     For the symmetric-passive peer to process NTP messages from a symmetric-active peer, enable NTP by using the ntp-service enable command on a symmetric passive peer.

·     For time synchronization, either the symmetric-active peer, the symmetric-passive peer, or both must be in synchronized state.

·     A symmetric active peer and a symmetric passive peer can be synchronized to each other. When they are in synchronized state, the peer with a higher stratum synchronizes to the peer with a lower stratum.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 2. (Details not shown.)

2.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Specify the local clock as the reference source, with the stratum level 2.

[SwitchA] ntp-service refclock-master 2

3.     Configure Switch B:

# Enable the NTP service.

<SwitchB> system-view

[SwitchB] ntp-service enable

# Specify Switch A as the NTP server of Switch B.

[SwitchB] ntp-service unicast-server 3.0.1.31

4.     Configure Switch C:

# Enable the NTP service on Switch C after Switch B has synchronized to Switch A.

<SwitchC> system-view

[SwitchC] ntp-service enable

# Configure Switch B as a symmetric passive peer.

[SwitchC] ntp-service unicast-peer 3.0.1.32

Verifying the configuration

# Display the NTP status of Switch B after clock synchronization.

[SwitchB] display ntp-service status

 Clock status: synchronized                                                     

 Clock stratum: 3                                                              

 System peer: 3.0.1.33                                                         

 Local mode: sym_passive                                                       

 Reference clock ID: 3.0.1.33                                                  

 Leap indicator: 00                                                            

 Clock jitter: 0.000015 s                                                       

 Stability: 0.000 pps                                                          

 Clock precision: 2^-16                                                        

 Root delay: 0.51880 ms                                                         

 Root dispersion: 15885.80322 ms                                               

 Reference time: d3d3ac88.fa1db5e9  Mon, Aug 13 2012 16:40:40.977       

The output shows that Switch B has synchronized to Switch A. The clock stratum level is 3 on Switch B and 2 on Switch A.

# Display the NTP status of Switch C after clock synchronization.

[SwitchC] display ntp-service status

 Clock status: synchronized

 Clock stratum: 4

 Reference clock ID: 3.0.1.33

 Nominal frequency: 64.0000 Hz

 Actual frequency: 64.0000 Hz

 Clock precision: 2^7

 Clock offset: -21.1982 ms

 Root delay: 15.00 ms

 Root dispersion: 775.15 ms

 Peer dispersion: 34.29 ms

 Reference time: 15:22:47.083 UTC Sep 19 2005 (C6D95647.153F7CED)

The output shows that Switch C has synchronized to Switch B. The clock stratum level is 4 on Switch C and 3 on Switch B.

Configuration files

·     Switch A:

#

 ntp-service enable

#

 ntp-service refclock-master 2

#

·     Switch B:

#

 ntp-service enable

#

 ntp-service unicast-server 3.0.1.31

#

·     Switch C:

#

 ntp-service enable

#

 ntp-service unicast-peer 3.0.1.32

#

Example: Configuring the NTP broadcast mode

Network requirements

As shown in Figure 3, configure NTP to meet the following requirements:

·     Switch C's local clock is a reference source, with the stratum level 2.

·     Switch C operates in broadcast server mode and sends out broadcast messages from VLAN-interface 2.

·     Switch A and Switch B operate in broadcast client mode, and receive broadcast messages on VLAN-interface 2.

Figure 3 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the NTP broadcast mode, follow these restrictions and guidelines:

·     For the broadcast client to synchronize to the broadcast server, a broadcast server must be synchronized by other devices or use its local clock as a reference source.

·     A broadcast client can synchronize to a broadcast server, but a broadcast server cannot synchronize to a broadcast client.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 3. (Details not shown.)

2.     Configure Switch C:

# Enable the NTP service on Switch C.

<SwitchC> system-view

[SwitchC] ntp-service enable

# Specify the local clock as the reference source, with the stratum level 2.

[SwitchC] ntp-service refclock-master 2

# Configure Switch C to operate in broadcast server mode and send broadcast messages through VLAN-interface 2.

[SwitchC]vlan 2

[SwitchC-vlan2]quit

[SwitchC] interface vlan-interface 2

[SwitchC-Vlan-interface2] undo shutdown

[SwitchC-Vlan-interface2] ntp-service broadcast-server

3.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Configure Switch A to operate in broadcast client mode and receive broadcast messages on VLAN-interface 2.

[SwitchA]vlan 2

[SwitchA-vlan2]quit

[SwitchA] interface vlan-interface 2

[SwitchA-Vlan-interface2] undo shutdown

[SwitchA-Vlan-interface2] ntp-service broadcast-client

4.     Configure Switch B:

# Enable the NTP service.

<SwitchB> system-view

[SwitchB] ntp-service enable

# Configure Switch B to operate in broadcast client mode and receive broadcast messages on VLAN-interface 2.

[SwitchB]vlan 2

[SwitchB-vlan2]quit

[SwitchB] interface vlan-interface 2

[SwitchB-Vlan-interface2] undo shutdown

[SwitchB-Vlan-interface2] ntp-service broadcast-client

Verifying the configuration

# Switch A and Switch B get synchronized upon receiving a broadcast message from Switch C. Display the NTP status of Switch A after clock synchronization.

[SwitchA-Vlan-interface2] display ntp-service status

 Clock status: synchronized                                                    

 Clock stratum: 3                                                              

 System peer: 3.0.1.31                                                          

 Local mode: sym_passive                                                       

 Reference clock ID: 3.0.1.31                                                  

 Leap indicator: 00                                                             

 Clock jitter: 0.000214 s                                                      

 Stability: 0.000 pps                                                          

 Clock precision: 2^-16                                                        

 Root delay: 0.50354 ms                                                        

 Root dispersion: 3950.56152 ms                                                

 Reference time: d3d3b9cb.fa186ac0  Mon, Aug 13 2012 17:37:15.976 

The output shows that Switch A has synchronized to Switch C. The clock stratum level is 3 on Switch A and 2 on Switch C.

Configuration files

·     Switch C:

#

 ntp-service enable

#

 ntp-service refclock-master 2

#

vlan 2

#

interface Vlan-interface2

 ip address 3.0.1.31 255.255.255.0

 ntp-service broadcast-server

#

·     Switch A:

#

 ntp-service enable

#

vlan 2

#

interface Vlan-interface2

 ip address 3.0.1.30 255.255.255.0

 ntp-service broadcast-client

#

·     Switch B:

#

 ntp-service enable

#

vlan 2

#

interface Vlan-interface2

 ip address 3.0.1.32 255.255.255.0

 ntp-service broadcast-client

#

Example: Configuring the NTP multicast mode

Network requirements

As shown in Figure 4, configure NTP to meet the following requirements:

·     Switch C's local clock is a reference source, with the stratum level 2.

·     Switch C operates in multicast server mode and sends out multicast messages from VLAN-interface 2.

·     Switch A and Switch D operate in multicast client mode and receive multicast messages on VLAN-interface 3 and VLAN-interface 2, respectively.

Figure 4 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the NTP multicast mode, follow these restrictions and guidelines:

·     For the multicast client to synchronize to the multicast server, a multicast server must be synchronized by other devices or use its local clock as a reference source.

·     A multicast client can synchronize to a multicast server, but a multicast server cannot synchronize to a multicast client.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 4. (Details not shown.)

2.     Configure Switch C:

# Enable the NTP service.

<SwitchC> system-view

[SwitchC] ntp-service enable

# Specify the local clock as the reference source, with the stratum level 2.

[SwitchC] ntp-service refclock-master 2

# Configure Switch C to operate in multicast server mode and send multicast messages through VLAN-interface 2.

[SwitchC]vlan 2

[SwitchC-vlan2]quit

[SwitchC] interface vlan-interface 2

[SwitchC-Vlan-interface2] undo shutdown

[SwitchC-Vlan-interface2] ntp-service multicast-server

3.     Configure Switch D:

# Enable the NTP service.

<SwitchD> system-view

[SwitchD] ntp-service enable

# Configure Switch D to operate in multicast client mode and receive multicast messages on VLAN-interface 2.

[SwitchD]vlan 2

[SwitchD-vlan2]quit

[SwitchD] interface vlan-interface 2

[SwitchD-Vlan-interface2] undo shutdown

[SwitchD-Vlan-interface2] ntp-service multicast-client

4.     Configure Switch B:

# Enable the NTP service.

<SwitchB> system-view

[SwitchB] ntp-service enable

# Enable IP multicast routing and IGMP.

[SwitchB] multicast routing-enable

[SwitchB]vlan 2

[SwitchB-vlan2]quit

[SwitchB] interface vlan-interface 2

[SwitchB-Vlan-interface2] undo shutdown

[SwitchB-Vlan-interface2] pim dm

[SwitchB-Vlan-interface2] quit

[SwitchB] vlan 3

[SwitchB-vlan3] port GigabitEthernet 3/0/1

[SwitchB-vlan3] quit

[SwitchB] interface vlan-interface 3

[SwitchB-Vlan-interface3] undo shutdown

[SwitchB-Vlan-interface3] igmp enable

[SwitchB-Vlan-interface3] igmp static-group 224.0.1.1

[SwitchB-Vlan-interface3] quit

[SwitchB] interface GigabitEthernet 3/0/1

[SwitchB-GigabitEthernet3/0/1] undo shutdown

[SwitchB-GigabitEthernet3/0/1] igmp-snooping static-group 224.0.1.1 vlan 3

5.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Configure Switch A to operate in multicast client mode and receive multicast messages on VLAN-interface 3.

[SwitchA]vlan 3

[SwitchA-vlan3]quit

[SwitchA] interface vlan-interface 3

[SwitchA-Vlan-interface3] undo shutdown

[SwitchA-Vlan-interface3] ntp-service multicast-client

Verifying the configuration

# Display the NTP status of Switch D after clock synchronization.

[SwitchD-Vlan-interface2] display ntp-service status

Clock status: synchronized                                                    

 Clock stratum: 3                                                              

 System peer: 3.0.1.31                                                         

 Local mode: sym_passive                                                       

 Reference clock ID: 3.0.1.31                                                  

 Leap indicator: 00                                                            

 Clock jitter: 0.000305 s                                                       

 Stability: 0.000 pps                                                          

 Clock precision: 2^-16                                                        

 Root delay: 0.96130 ms                                                         

 Root dispersion: 16.52527 ms                                                  

 Reference time: d3d3bcde.fa197f8e  Mon, Aug 13 2012 17:50:22.976

The output shows that Switch D has synchronized to Switch C. The clock stratum level is 3 on Switch D and 2 on Switch C.

# Display the NTP status of Switch A after clock synchronization.

[SwitchA-Vlan-interface3] display ntp-service status

 Clock status: synchronized                                                    

 Clock stratum: 3                                                              

 System peer: 3.0.1.31                                                         

 Local mode: bclient                                                           

 Reference clock ID: 3.0.1.31                                                  

 Leap indicator: 00                                                            

 Clock jitter: 0.000015 s                                                      

 Stability: 0.000 pps                                                           

 Clock precision: 2^-16                                                        

 Root delay: 0.90027 ms                                                        

 Root dispersion: 12.84790 ms                                                   

 Reference time: d3d4b196.e4f2a7c6  Tue, Aug 14 2012 11:14:30.894

The output shows that Switch A has synchronized to Switch C. The clock stratum level is 3 on Switch A and 2 on Switch C.

Configuration files

·     Switch C:

#

 ntp-service enable

#

 ntp-service refclock-master 2

#

vlan 2

#

interface Vlan-interface2

 ip address 3.0.1.31 255.255.255.0

 ntp-service multicast-server

#

·     Switch D:

#

 ntp-service enable

#

vlan 2

#

interface Vlan-interface2

 ip address 3.0.1.32 255.255.255.0

 ntp-service multicast-client

#

·     Switch B:

#

 ntp-service enable

#

 multicast routing-enable

#

vlan 2

#

vlan 3

#

interface Vlan-interface2

 ip address 3.0.1.30 255.255.255.0

 pim dm

#

interface Vlan-interface3

 ip address 1.0.1.10 255.255.255.0

 igmp enable

 igmp static-group 224.0.1.1

#

interface GigabitEthernet3/0/1

 port link-mode bridge

 port access vlan 3

 igmp-snooping static-group 224.0.1.1 vlan 3

#

·     Switch A:

#

 ntp-service enable

#

vlan 3

#

interface Vlan-interface3

 ip address 1.0.1.11 255.255.255.0

 ntp-service multicast-client

#

Example: Configuring the NTP broadcast mode with authentication

Network requirements

As shown in Figure 5, configure NTP to meet the following requirements:

·     Switch C's local clock is a reference source, with the stratum level 3.

·     Switch C operates in broadcast server mode and sends out broadcast messages from VLAN-interface 2.

·     Switch A and Switch B operate in broadcast client mode and receive broadcast messages on VLAN-interface 2.

·     NTP authentication is enabled on Switch A, Switch B, and Switch C.

Figure 5 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the NTP broadcast mode with authentication, follow these restrictions and guidelines:

·     When you configure NTP authentication in broadcast mode, do the following:

?     Enable NTP authentication.

?     Configure an authentication key.

?     Set the key as a trusted key on both the broadcast client and server.

?     Configure an NTP authentication key on the broadcast server.

·     For NTP authentication, the key IDs and key values configured on the broadcast server and client must be the same.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 5. (Details not shown.)

2.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Enable NTP authentication on Switch A. Configure an NTP authentication key, with the key ID of 88 and key value of 123456. Enter the key in plain text, and specify it as a trusted key.

[SwitchA] ntp-service authentication enable

[SwitchA] ntp-service authentication-keyid 88 authentication-mode md5 simple 123456

[SwitchA] ntp-service reliable authentication-keyid 88

# Configure Switch A to operate in NTP broadcast client mode and receive NTP broadcast messages on VLAN-interface 2.

[SwitchA] vlan 2

[SwitchA-vlan2]quit

[SwitchA] interface vlan-interface 2

[SwitchA-Vlan-interface2] undo shutdown

[SwitchA-Vlan-interface2] ntp-service broadcast-client

3.     Configure Switch B:

# Enable the NTP service.

<SwitchB> system-view

[SwitchB] ntp-service enable

# Enable NTP authentication on Switch B. Configure an NTP authentication key, with the key ID of 88 and key value of 123456. Enter the key in plain text and specify it as a trusted key.

[SwitchB] ntp-service authentication enable

[SwitchB] ntp-service authentication-keyid 88 authentication-mode md5 simple 123456

[SwitchB] ntp-service reliable authentication-keyid 88

# Configure Switch B to operate in broadcast client mode and receive NTP broadcast messages on VLAN-interface 2.

[SwitchB] vlan 2

[SwitchB-vlan2]quit

[SwitchB] interface vlan-interface 2

[SwitchB-Vlan-interface2] undo shutdown

[SwitchB-Vlan-interface2] ntp-service broadcast-client

4.     Configure Switch C:

# Enable the NTP service.

<SwitchC> system-view

[SwitchC] ntp-service enable

# Specify the local clock as the reference source, with the stratum level 3.

[SwitchC] ntp-service refclock-master 3

# Configure Switch C to operate in NTP broadcast server mode and send NTP broadcast packets through VLAN-interface 2.

[SwitchC] vlan 2

[SwitchC-vlan2]quit

[SwitchC] interface vlan-interface 2

[SwitchC-Vlan-interface2] undo shutdown

[SwitchC-Vlan-interface2] ntp-service broadcast-server

[SwitchC-Vlan-interface2] quit

# Enable NTP authentication on Switch C. Configure an NTP authentication key, with the key ID of 88 and key value of 123456. Enter the key in plain text, and specify it as a trusted key.

[SwitchC] ntp-service authentication enable

[SwitchC] ntp-service authentication-keyid 88 authentication-mode md5 simple 123456

[SwitchC] ntp-service reliable authentication-keyid 88

# Specify Switch C as an NTP broadcast server, and associate key 88 with Switch C.

[SwitchC] interface vlan-interface 2

[SwitchC-Vlan-interface2] ntp-service broadcast-server authentication-keyid 88

Verifying the configuration

Verify that Switch A and Switch B can synchronize their local clocks to Switch C after NTP authentication is enabled on Switch C.

# Display NTP service status on Switch B.

[SwitchB-Vlan-interface2] display ntp-service status

 Clock status: synchronized

 Clock stratum: 4

 System peer: 3.0.1.31

 Local mode: client

 Reference clock ID: 3.0.1.31

 Leap indicator: 00

 Clock jitter: 0.006683 s

 Stability: 0.000 pps

 Clock precision: 2^-10

 Root delay: 0.00127 ms

 Root dispersion: 2.89877 ms

 Reference time: d0d287a7.3119666f  Sat, Jan  8 2011  6:50:15.191

The output shows that Switch B has synchronized to Switch C. The clock stratum level is 4 on Switch B and 3 on Switch C.

# Display IPv4 NTP association information for Switch B.

[SwitchB-Vlan-interface2] display ntp-service sessions

       source          reference       stra reach poll  now offset  delay disper

********************************************************************************

 [1245]3.0.1.31        127.127.1.0        3     3   64   68   -0.0 0.0000    0.0

Notes: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured.

 Total sessions : 1

The output shows that an association has been set up between Switch B and Switch C.

Configuration files

·     Switch A:

#

 ntp-service enable

 ntp-service authentication enable

ntp-service authentication-keyid 88 authentication-mode md5 cipher $c$3$fZ51vG6

nEZoybjDKlM6huQYwq5g227NIYw==

ntp-service reliable authentication-keyid 88

#

#

vlan 2

#

interface Vlan-interface2

 ntp-service broadcast-client

#

·     Switch B:

#

 ntp-service enable

 ntp-service authentication enable

ntp-service authentication-keyid 88 authentication-mode md5 cipher $c$3$fZ51vG6

nEZoybjDKlM6huQYwq5g227NIYw==

ntp-service reliable authentication-keyid 88

#

#

vlan 2

#

interface Vlan-interface2

 ntp-service broadcast-client

#

·     Switch C:

#

 ntp-service enable

 ntp-service refclock-master 3

#

vlan 2

#

interface Vlan-interface2

 ntp-service broadcast-server

#

 ntp-service authentication enable

ntp-service authentication-keyid 88 authentication-mode md5 cipher $c$3$fZ51vG6

nEZoybjDKlM6huQYwq5g227NIYw==

ntp-service reliable authentication-keyid 88

ntp-service broadcast-server authentication-keyid 88

#

Example: Configuring the SNTP client/server mode

Network requirements

As shown in Figure 6, configure NTP to meet the following requirements:

·     Switch A's local clock is a reference source, with the stratum level 2.

·     Switch B operates in SNTP client mode, and Switch A is the NTP server for Switch B.

·     NTP authentication is configured on Switch A and SNTP authentication is configured on Switch B.

Figure 6 Network diagram

 

Software version used

This configuration example was created and verified on S12500-CMW710-R7129.

Configuration restrictions and guidelines

When you configure the SNTP authentication in client/server mode, follow these restrictions and guidelines:

·     Enable authentication on both the NTP server and the SNTP client.

·     Configure the SNTP client with the same authentication key ID and key value as the NTP server, and specify the key as a trusted key on both the NTP server and the SNTP client.

·     Associate the specified key with the NTP server on the SNTP client.

Configuration procedures

1.     Set the IP address for each interface as shown in Figure 6. (Details not shown.)

2.     Configure Switch A:

# Enable the NTP service.

<SwitchA> system-view

[SwitchA] ntp-service enable

# Configure the local clock of Switch A as a reference source, with the stratum level 2.

[SwitchA] ntp-service refclock-master 2

# Enable NTP authentication.

[SwitchA] ntp-service authentication enable

# Configure an NTP authentication key, with the key ID of 10 and key value of aNiceKey. Enter the key in plain text.

[SwitchA] ntp-service authentication-keyid 10 authentication-mode md5 simple aNiceKey

# Specify the key as a trusted key.

[SwitchA] ntp-service reliable authentication-keyid 10

3.     Configure Switch B:

# Enable the SNTP service.

<SwitchB> system-view

[SwitchB] sntp enable

# Enable SNTP authentication on Switch B.

[SwitchB] sntp authentication enable

# Configure an SNTP authentication key, with the key ID of 10 and key value of aNiceKey. Enter the key in plain text.

[SwitchB] sntp authentication-keyid 10 authentication-mode md5 simple aNiceKey

# Specify the key as a trusted key.

[SwitchB] sntp reliable authentication-keyid 10

# Specify Switch A as the NTP server of Switch B, and associate the server with key 10.

[SwitchB] sntp unicast-server 1.0.1.11 authentication-keyid 10

Verifying the configuration

# Display SNTP association information for Switch B.

[SwitchB] display sntp sessions

SNTP server     Stratum   Version    Last receive time

1.0.1.11        2         4          Tue, May 17 2011  9:11:20.833 (Synced)

The output shows that an association has been established between Switch B and Switch A, and Switch B has synchronized to Switch A.

Configuration files

·     Switch A:

#

 ntp-service enable

 ntp-service authentication enable

 ntp-service authentication-keyid 10 authentication-mode md5 cipher $c$3$cl9hOWY

Vdulw8Wql/zmIH4mwn8OcbXO1v5l9

 ntp-service reliable authentication-keyid 10

 ntp-service refclock-master 2

#

·     Switch B:

#

sntp enable

sntp authentication enable

sntp authentication-keyid 10 authentication-mode md5 cipher $c$3$FjioZoTZyZSGTN

3OI5Lv3yTIYGVi4FzK4T92

 sntp reliable authentication-keyid 10

 sntp unicast-server 1.0.0.11 authentication-keyid 10

#

Related documentation

·     H3C S12500 Routing Switch Series Network Management and Monitoring Configuration Guide

·     H3C S12500 Routing Switch Series Network Management and Monitoring Command Reference