HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

129
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable NTP authentication.
ntp-service authentication enable
By default, NTP authentication is
disabled.
3. Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid authentication-mode md5
[ cipher | simple ] value
By default, no NTP authentication
key is configured.
Configure the same authentication
key on the client and server.
4. Configure the key as a trusted
key.
ntp-service reliable
authentication-keyid keyid
By default, no authentication key is
configured to be trusted.
5. Enter interface view.
interface interface-type
interface-number
N/A
6. Associate the specified key
with the multicast server.
ntp-service multicast-server
authentication-keyid keyid
You can associate a non-existing
key with the multicast server. To
enable NTP authentication, you
must configure the key and specify
it as a trusted key after associating
the key with the multicast server.
Displaying and maintaining NTP
Task Command Remarks
Display information about
NTP service status.
display ntp-service status [ | { begin |
exclude | include }
regular-expression ]
Available in any view.
Display information about
NTP sessions.
display ntp-service sessions
[ verbose ] [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display the brief information
about the NTP servers from the
local device back to the
primary reference source.
display ntp-service trace [ | { begin |
exclude | include }
regular-expression ]
Available in any view.
NTP client/server mode configuration example
In this example, Device A is the SecPath firewall.
Network requirements
Perform the following configurations to synchronize the time between Device B and Device A:
• As shown in Figure 57, the local clock
of Device A is to be used as a reference source, with the
stratum level 2.
• Device B operates in client/server mode and Device A is to be used as the NTP server of Device B.