R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

110
Clock offset: 0.0000 ms
Root delay: 31.00 ms
Root dispersion: 1.05 ms
Peer dispersion: 7.81 ms
Reference time: 14:53:27.371 UTC Sep 19 2005 (C6D94F67.5EF9DB22)
As shown above, Device B has been synchronized to Device A, and the clock stratum level of
Device B is 3, while that of Device A is 2.
# View the NTP session information of Device B, which shows that an association has been set up
between Device B and Device A.
[DeviceB] display ntp-service sessions
source reference stra reach poll now offset delay disper
**************************************************************************
[12345] 1.0.1.11 127.127.1.0 2 63 64 3 -75.5 31.0 16.5
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
Configuring the NTP symmetric mode
Network requirements
As shown in Figure 51, the local clock of Firewall A is to be configured as a reference source, with the
stratum level of 2. Firewall B operates in client mode and Firewall A is to be used as the NTP server of
Firewall B. Firewall C operates in symmetric-active mode and Firewall B acts as the peer of Firewall C.
Figure 51 Network diagram
Configuration procedure
1. Set the IP address for each interface as shown in Figure 51. (Details not shown.)
2. Configure Firewall A:
# Specify the local clock as the reference source, with the stratum level of 2.
<FirewallA> system-view
[FirewallA] ntp-service refclock-master 2
3. Configure Firewall B:
# Specify Firewall A as the NTP server of Firewall B.
<FirewallB> system-view