R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101
102
• You can configure multiple servers by repeating the ntp-service unicast-server command. The
clients will choose the optimal reference source.
Configuration procedure
To configure an NTP client:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Specify an NTP server
for the device.
ntp-service unicast-server [ vpn-instance
vpn-instance-name ] { ip-address |
server-name } [ authentication-keyid keyid
| priority | source-interface interface-type
interface-number | version number ] *
By default, no NTP server is
specified.
In this command, the ip-address
argument must be a unicast
address, rather than a broadcast
address, a multicast address or the
IP address of the local clock.
Configuring the NTP symmetric peers mode
Configuration guidelines
• To enable NTP, use the ntp-service refclock-master command or any NTP configuration command
in Configuring the NTP operation modes.
Otherwise, a symmetric-passive peer will not process NTP
messages from a symmetric-active peer.
• After you specify the source interface for NTP messages by specifying the source interface
source-interface option, the source IP address of the NTP messages is set as the primary IP address
of the specified interface.
• Either the symmetric-active peer or the symmetric-passive peer must be in synchronized state.
Otherwise, the clock synchronization does not proceed.
• You can configure multiple symmetric-passive peers by repeating the ntp-service unicast-peer
command.
Configuration procedure
To specify a symmetric-passive peer on the active peer:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Specify a
symmetric-passive peer
for the device.
ntp-service unicast-peer
[ vpn-instance vpn-instance-name ]
{ ip-address | peer-name }
[ authentication-keyid keyid |
priority | source-interface
interface-type interface-number |
version number ] *
By default, no symmetric-passive peer is
specified.
The ip-address argument must be a
unicast address, rather than a broadcast
address, a multicast address, or the IP
address of the local clock.