R3204P16-HP Load Balancing Module System Management Configuration Guide-6PW101

112
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
Configuring NTP client/server mode with authentication
Network requirements
As shown in Figure 63, perform the following configurations to synchronize the time between LB B and
LB A and ensure network security.
• The local clock of LB A is to be configured as a reference source, with the stratum level of 2.
• LB B works in the client mode and LB A is to be used as the NTP server of LB B, with LB B as the client.
• NTP authentication is to be enabled on both LB A and LB B.
Figure 63 Network diagram for configuration of NTP client/server mode with authentication
Configuration procedure
1. Configure LB A:
# Specify the local clock as the reference source, with the stratum level of 2.
<LB A> system-view
[LB A] ntp-service refclcok-master 2
2. Configure LB B:
<LB B> system-view
# Enable NTP authentication on LB B.
[LB B] ntp-service authentication enable
# Set an authentication key.
[LB B] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[LB B] ntp-service reliable authentication-keyid 42
# Specify Device A as the NTP server.
[LB B] ntp-service unicast-server 1.0.1.11 authentication-keyid 42
Before LB B can synchronize its clock to that of LB A, you need to enable NTP authentication for LB A.
Perform the following configuration on LB A:
# Enable NTP authentication.
[LB A] ntp-service authentication enable
# Set an authentication key.
[LB A] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key as a trusted key.
[LB A] ntp-service reliable authentication-keyid 42
# View the NTP status of LB B after clock synchronization.
[LB B] display ntp-service status
Clock status: synchronized