R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

89
To do… Use the command… Remarks
Enter system view system-view —
Specify an NTP
server for the device
ntp-service unicast-server [ vpn-instance vpn-instance-name ]
{ ip-address | server-name } [ authentication-keyid keyid |
priority | source-interface interface-type interface-number |
version number ] *
Required
No NTP server is
specified by default.
NOTE:
• In the ntp-service unicast-server command,
ip-address must be a unicast address, rather than a
broadcast address, a multicast address or the IP address of the local clock.
• When the source interface for NTP messages is specified by the source-interface ar
g
ument, the source
IP address of the NTP messages will be confi
g
ured as the primary IP address of the specified interface.
• A device can act as a server to synchronize the clock of other devices only after its clock has been
synchronized. If the clock of a server has a stratum level hi
g
her than or equal to that of a client’s clock,
the client will not synchronize its clock to the server’s.
• You can configure multiple servers by repeating the ntp-service unicast-server command. The clients
will choose the optimal reference source.
Configuring the NTP symmetric peers mode
For devices working in the symmetric mode, you need to specify a symmetric-passive peer on a
symmetric-active peer.
Following these steps to configure a symmetric-active device:
To do… Use the command…
Remarks
Enter system view system-view —
Specify a
symmetric-passive peer
for the device
ntp-service unicast-peer [ vpn-instance
vpn-instance-name ] { ip-address | peer-name }
[ authentication-keyid keyid | priority |
source-interface interface-type interface-number |
version number ] *
Required
No symmetric-passive
peer is specified by
default.
NOTE:
• In the symmetric mode, you should use the ntp-service refclock-master command or any NTP
configuration command in Configuring the operation modes of NTP t
o enable NTP; otherwise, a
symmetric-passive peer will not process NTP messages from a symmetric-active peer.
• In the ntp-service unicast-peer command,
ip-address must be a unicast address, rather than a
broadcast address, a multicast address or the IP address of the local clock.
• When the source interface for NTP messages is specified by the source-interface ar
g
ument, the source
IP address of the NTP messages will be configured as the primary IP address of the specified interface.
• Typically, at least one of the symmetric-active and symmetric-passive peers has been synchronized;
otherwise the clock synchronization will not proceed.
• You can configure multiple symmetric-passive peers by repeating the ntp-service unicast-peer
command.