HP VPN Firewall Appliances System Management and Maintenance Configuration Guide
120
Configuring the NTP client/server mode
If you specify the source interface for NTP messages by specifying the source interface source-interface
option, NTP uses the primary IP address of the specified interface as the source IP address of the NTP
messages.
A device can act as a server to synchronize other devices only after it is synchronized. If a server has a
stratum level higher than or equal to a client, the client does not synchronize to that server.
In the ntp-service unicast-server command, ip-address must be a unicast address, rather than a
broadcast address, a multicast address or the IP address of the local clock.
To specify an NTP server on the client:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Specify an NTP server for the
device.
ntp-service unicast-server
[ vpn-instance vpn-instance-name ]
{ ip-address | server-name }
[ authentication-keyid keyid |
priority | source-interface
interface-type interface-number |
version number ] *
By default, no NTP server is
specified.
You can configure multiple servers
by repeating the command. The
clients will select the optimal
reference source.
Configuring the NTP symmetric peers mode
Follow these guidelines when you configure the NTP symmetric peers mode:
• For devices operating in symmetric mode, specify a symmetric-passive peer on a symmetric-active
peer.
• Use the ntp-service refclock-master command or any NTP configuration command in "Configuring
NTP operation modes" to enable NT
P. Otherwise, a symmetric-passive peer does not process NTP
messages from a symmetric-active peer.
• Either the symmetric-active peer or the symmetric-passive peer must be in synchronized state.
Otherwise, clock synchronization does not proceed.
• After you specify the source interface for NTP messages by specifying the source interface
source-interface option, the source IP address of the NTP messages is set as the primary IP address
of the specified interface.
To specify a symmetric-passive peer on the active peer:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Specify a symmetric-passive
peer for the device.
ntp-service unicast-peer
[ vpn-instance vpn-instance-name ]
{ ip-address | peer-name }
[ authentication-keyid keyid |
priority | source-interface
interface-type interface-number |
version number ] *
By default, no symmetric-passive
peer is specified.
The ip-address argument must be a
unicast address, rather than a
broadcast address, a multicast
address, or the IP address of the
local clock.