Configuring Ntp Security Mechanisms - Huawei NetEngine5000E Configuration Manual

HUAWEI NetEngine5000E Core Router
Configuration Guide - System Management
**********************************************************************
[12345] 127.127.1.0
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured,6 vpn-
instance
Run the display ntp-service status command to view the status of the NTP service.
<HUAWEI>display ntp-service status
clock status: synchronized
clock stratum: 2
reference clock ID: LOCAL (0)
nominal frequency: 60.0002 Hz
actual frequency: 60.0002 Hz
clock precision: 2^18
clock offset: 0.0000 ms
root delay: 0.00 ms
root dispersion: 0.00 ms
peer dispersion: 10.00 ms
reference time: 15:51:36.259 UTC Apr 25 2005 (C6179088.426490A3)
Run the display ntp-service trace command to trace the path of reference clock source from
the local device.
<HUAWEI> display ntp-service trace
server 127.0.0.1,stratum 5, offset 0.024099, synch distance 0.06337,
server 171.1.1.2,stratum 4, offset 0.028786, synch distance 0.04575,
server 201.1.1.2,stratum 3, offset 0.035199, synch distance 0.03075,
server 200.1.7.1,stratum 2, offset 0.039855, synch distance 0.01096,
refid 127.127.1.0
Run the display ntp-service bd-status command to view the status of each board on a router.
<HUAWEI> display ntp-service bd-status
Board ID
Sync Source
NTP Server Configured : No
Clock Status
Offset
Clock Precision
Poll
Reference Time
Current Time

2.4 Configuring NTP Security Mechanisms

This section describes how to ensure the security of NTP sessions through NTP security
mechanisms.
Applicable Environment
NTP supports two security mechanisms: access authority and NTP authentication.
l
Issue 01 (2011-10-15)
source reference
LOCAL(0)
: 17
: 127.127.1.0
: synchronized
: 0.7 ms
: 2^17
: 8
: 17:04:55.236 UTC Sep 11 2009(CE5501B7.3C8D4BAD)
: 17:05:39.359 UTC Sep 11 2009(CE5501E3.5C0DB270)
Access authority
Access authority is a type of simple security method provided by the NE5000E to protect
local NTP services.
The NE5000E provides four access authority levels. When an NTP access request packet
reaches the local end, it is matched in an order from the maximum access authority to the
minimum access authority. The first matched authority level takes effect. The matching
order is as follows:
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
stra reach poll now offset
1 3 64 68
2 NTP Configuration
delay disper
0.0 0.0 0.4
26