H3C S5100-SI Operation Manual page 579

Network diagram
Figure 1-10 Network diagram for NTP server/client mode with authentication configuration
Configuration procedure
1) Configure Device B.
# Enter system view.
<DeviceB> system-view
# Set Device A as the NTP server.
[DeviceB] ntp-service unicast-server 1.0.1.11
# Enable the NTP authentication function.
[DeviceB] ntp-service authentication enable
# Configure an MD5 authentication key, with the key ID being 42 and the key being aNiceKey.
[DeviceB] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key 42 as a trusted key.
[DeviceB] ntp-service reliable authentication-keyid 42
# Associate the trusted key with the NTP server (Device A).
[DeviceB] ntp-service unicast-server 1.0.1.11 authentication-keyid 42
After the above configurations, Device B is ready to synchronize with Device A. Because the NTP
authentication function is not enabled on Device A, the clock of Device B will fail to be synchronized to
that of Device A.
2) To synchronize Device B, you need to perform the following configurations on Device A.
# Enable the NTP authentication function.
<DeviceA> system-view
[DeviceA] ntp-service authentication enable
# Configure an MD5 authentication key, with the key ID being 42 and the key being aNiceKey.
[DeviceA] ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey
# Specify the key 42 as a trusted key.
[DeviceA] ntp-service reliable authentication-keyid 42
(After the above configurations, the clock of Device B can be synchronized to that of Device A.) View the
status of Device B after synchronization.
[DeviceB] display ntp-service status
Clock status: synchronized
Clock stratum: 3
Reference clock ID: 1.0.1.11
Nominal frequence: 60.0002 Hz
Actual frequence: 60.0002 Hz
Clock precision: 2^18
1-22