R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

112

Figure 52 Network diagram

Configuration procedure

1. Set the IP address for each interface as shown in Figure 52. (Details not shown.)

2. Configure Firewall C:

# Specify the local clock as the reference source, with the stratum level of 2.

<FirewallC> system-view

[FirewallC] ntp-service refclock-master 2

# Configure Firewall C to operate in broadcast server mode and send broadcast messages

through GigabitEthernet 0/1.

[FirewallC] interface gigabitethernet 0/1

[FirewallC-GigabitEthernet0/1] ntp-service broadcast-server

3. Configure Firewall A:

# Configure Firewall A to operate in broadcast client mode and receive broadcast messages on

GigabitEthernet 0/1.

<FirewallA> system-view

[FirewallA] interface gigabitethernet 0/1

[FirewallA-GigabitEthernet0/1] ntp-service broadcast-client

4. Configure Firewall B:

# Configure Firewall B to operate in broadcast client mode and receive broadcast messages on

GigabitEthernet 0/1.

<FirewallB> system-view

[FirewallB] interface gigabitethernet 0/1

[FirewallB-GigabitEthernet0/1] ntp-service broadcast-client

Firewall A and Firewall B get synchronized upon receiving a broadcast message from Firewall C.

# Take Firewall A as an example. View the NTP status of Firewall A after clock synchronization.

[FirewallA-GigabitEthernet0/1] display ntp-service status

Clock status: synchronized

Clock stratum: 3

Reference clock ID: 3.0.1.31

Nominal frequency: 64.0000 Hz

Actual frequency: 64.0000 Hz

Clock precision: 2^7