R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101
114
# Configure Firewall C to operate in multicast server mode and send multicast messages through
GigabitEthernet 0/1.
[FirewallC] interface gigabitethernet 0/1
[FirewallC-GigabitEthernet0/1] ntp-service multicast-server
3. Configure Firewall D:
# Configure Firewall D to operate in multicast client mode and receive multicast messages on
GigabitEthernet 0/1.
<FirewallD> system-view
[FirewallD] interface gigabitethernet 0/1
[FirewallD-GigabitEthernet0/1] ntp-service multicast-client
Because Firewall D and Firewall C are on the same subnet, Firewall D can receive the multicast
messages from Firewall C without being enabled with the multicast functions and can be
synchronized to Firewall C.
# View the NTP status of Firewall D after clock synchronization.
[FirewallD-GigabitEthernet0/1] display ntp-service status
Clock status: synchronized
Clock stratum: 3
Reference clock ID: 3.0.1.31
Nominal frequency: 64.0000 Hz
Actual frequency: 64.0000 Hz
Clock precision: 2^7
Clock offset: 0.0000 ms
Root delay: 31.00 ms
Root dispersion: 8.31 ms
Peer dispersion: 34.30 ms
Reference time: 16:01:51.713 UTC Sep 19 2005 (C6D95F6F.B6872B02)
As shown above, Firewall D has been synchronized to Firewall C and the clock stratum level of
Firewall D is 3, while that of Firewall C is 2.
# View the NTP session information of Firewall D, which shows that an association has been set up
between Firewall D and Firewall C.
[FirewallD-GigabitEthernet0/1] display ntp-service sessions
source reference stra reach poll now offset delay disper
**************************************************************************
[1234] 3.0.1.31 127.127.1.0 2 254 64 62 -16.0 31.0 16.6
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
4. Configure Firewall B:
Because Firewall A and Firewall C are on different subnets, you must enable the multicast functions
on Firewall B before Firewall A can receive multicast messages from Firewall C.
# Enable the IP multicast function.
<FirewallB> system-view
[FirewallB] multicast routing-enable
[FirewallB] interface gigabitethernet 0/1
[FirewallB-GigabitEthernet0/1] igmp enable
[FirewallB-GigabitEthernet0/1] igmp static-group 224.0.1.1
[FirewallB-GigabitEthernet0/1] quit
[FirewallB] interface gigabitethernet 0/2