R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

Figure 43 Network diagram for NTP symmetric peers mode configuration

Configuration procedure

1. Configuration on Firewall A:

# Specify the local clock as the reference source, with the stratum level of 2.

<FirewallA> system-view

[FirewallA] ntp-service refclock-master 2

2. Configuration on Firewall B:

# Specify Firewall A as the NTP server of Firewall B.

<FirewallB> system-view

[FirewallB] ntp-service unicast-server 3.0.1.31

3. Configuration on Firewall C (after Firewall B is synchronized to Firewall A):

# Specify the local clock as the reference source, with the stratum level of 1.

<FirewallC> system-view

[FirewallC] ntp-service refclock-master 1

# Configure Firewall B as a symmetric peer after local synchronization.

[DeviceC] ntp-service unicast-peer 3.0.1.32

In the step above, Firewall B and Firewall C are configured as symmetric peers, with Firewall C in the

symmetric-active mode and Firewall B in the symmetric-passive mode. Because the stratus level of Firewall

C is 1 while that of Firewall B is 3, Firewall B is synchronized to Firewall C.

# View the NTP status of Firewall B after clock synchronization.

[FirewallB] display ntp-service status

Clock status: synchronized

Clock stratum: 2

Reference clock ID: 3.0.1.33

Nominal frequency: 64.0000 Hz

Actual frequency: 64.0000 Hz

Clock precision: 2^7

Clock offset: -21.1982 ms

Root delay: 15.00 ms

Root dispersion: 775.15 ms

Peer dispersion: 34.29 ms

Reference time: 15:22:47.083 UTC Sep 19 2005 (C6D95647.153F7CED)

Firewall A

Firewall B Firewall C

3.0.1.31/24

3.0.1.32/24 3.0.1.33/24