HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

133
Figure 59 Network diagram
Configuration procedure
1. Set the IP address for each interface as shown in Figure 59. (Details not shown.)
2. Configure Firewall C:
# Specify the local clock as the reference source, with the stratum level 2.
<FirewallC> system-view
[FirewallC] ntp-service refclock-master 2
# Configure Firewall C to operate in broadcast server mode and send broadcast messages
through GigabitEthernet 0/1.
[FirewallC] interface gigabitethernet 0/1
[FirewallC-GigabitEthernet0/1] ntp-service broadcast-server
3. Configure Firewall A:
# Configure Firewall A to operate in broadcast client mode and receive broadcast messages on
GigabitEthernet 0/1.
<FirewallA> system-view
[FirewallA] interface gigabitethernet 0/1
[FirewallA-GigabitEthernet0/1] ntp-service broadcast-client
4. Configure Firewall B:
# Configure Firewall B to operate in broadcast client mode and receive broadcast messages on
GigabitEthernet 0/1.
<FirewallB> system-view
[FirewallB] interface gigabitethernet 0/1
[FirewallB-GigabitEthernet0/1] ntp-service broadcast-client
Firewall A and Firewall B get synchronized upon receiving a broadcast message from Firewall C.
# Take Firewall A as an example. Display the NTP status of Firewall A after clock synchronization.
[FirewallA-GigabitEthernet0/1] display ntp-service status
Clock status: synchronized
Clock stratum: 3
Reference clock ID: 3.0.1.31
Nominal frequency: 64.0000 Hz
Actual frequency: 64.0000 Hz
GE0/1
3.0.1.31/24
GE0/1
3.0.1.32/24
Firewall A
NTP broadcast client
Firewall C
NTP broadcast server
Firewall B
NTP broadcast client
GE0/1
3.0.1.30/24