Huawei AR150/200 Series Configuration Manual page 137

Huawei AR150&200 Series Enterprise Routers
Configuration Guide - Network Management
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
Procedure
Step 1 Configure the IP addresses based on
RouterD are routable. The detailed procedures are not mentioned here.
Step 2 Configure a primary NTP clock on RouterA and enable NTP authentication.
# On RouterA, set its local clock as a primary NTP clock with stratum being 2.
<RouterA> system-view
[RouterA] ntp-service refclock-master 2
# Enable NTP authentication, configure the authentication key, and declare the key to be reliable.
[RouterA] ntp-service authentication enable
[RouterA] ntp-service authentication-keyid 42 authentication-mode md5 Hello
[RouterA] ntp-service reliable authentication-keyid 42
Note that authentication keys configured on the server and the client should be the same.
Step 3 Configure a primary NTP clock on RouterB and enable NTP authentication.
# On RouterB, enable NTP authentication. Configure the authentication key and declare the key
to be reliable.
<RouterB> system-view
[RouterB] ntp-service authentication enable
[RouterB] ntp-service authentication-keyid 42 authentication-mode md5 Hello
[RouterB] ntp-service reliable authentication-keyid 42
# Specify RouterA to be the NTP server of RouterB and use the authentication key.
[RouterB] ntp-service unicast-server 2.2.2.2 authentication-keyid 42
Step 4 On RouterC, specify RouterB to be the NTP server of RouterC.
<RouterC> system-view
[RouterC] ntp-service authentication enable
[RouterC] ntp-service authentication-keyid 42 authentication-mode md5 Hello
[RouterC] ntp-service reliable authentication-keyid 42
Issue 02 (2012-03-30)
Configure RouterB to be an NTP client and synchronize its clock with the clock of
RouterA.
Configure RouterC and RouterD to synchronize their clocks with the clock of RouterB.
Enable NTP authentication on all Routers.
NOTE
l You must enable NTP authentication on the client prior to specifying the IP address of the NTP server
and authentication key to be sent to the server; otherwise, NTP authentication is not performed before
clock synchronization.
l To implement authentication successfully, configure both the server and the client.
IP address of the reference clock
Stratum of the primary NTP clock
Authentication key and its ID
Password
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Figure 5-2 so that RouterA, RouterB, RouterC and
5 NTP Configuration
126