三層交換機NTP典型配置舉例

H3CS5130-EINTP典型配置舉例TOC\o"1-5"\h\z\o"CurrentDocument"1簡介 1-1\o"CurrentDocument"2配置前提 1-1\o"CurrentDocument"NTP服務(wù)器/客戶端模式典型配置舉例 3-1\o"CurrentDocument"組網(wǎng)需求 3-1\o"CurrentDocument"使用版本 3-1\o"CurrentDocument"配置步驟 3-2\o"CurrentDocument"Device A 的配置 3-2\o"CurrentDocument"Device B 的配置 3-2\o"CurrentDocument"Device C 的配置 3-2\o"CurrentDocument"驗證配置 3-2\o"CurrentDocument"配置文件 3-3\o"CurrentDocument"NTP廣播模式典型配置舉例 4-3\o"CurrentDocument"組網(wǎng)需求 4-3\o"CurrentDocument"使用版本 4-4\o"CurrentDocument"配置步驟 4-4\o"CurrentDocument"Device C 的配置 4-4\o"CurrentDocument"Device A 的配置 4-4\o"CurrentDocument"驗證配置 4-5\o"CurrentDocument"配置文件 4-5\o"CurrentDocument"NTP組播模式典型配置舉例 5-6\o"CurrentDocument"組網(wǎng)需求 5-6\o"CurrentDocument"使用版本 5-7\o"CurrentDocument"配置步驟 5-7\o"CurrentDocument"Device C 的配置 5-7\o"CurrentDocument"Device D 的配置 5-7\o"CurrentDocument"Device B 的配置 5-8\o"CurrentDocument"Device A 的配置 5-8\o"CurrentDocument"驗證配置 5-8\o"CurrentDocument"配置文件 5-9\o"CurrentDocument"6帶身份3^證的NTP客戶端/服務(wù)器模式典型配置舉例 6-10\o"CurrentDocument"組網(wǎng)需求 6-10\o"CurrentDocument"使用版本 6-10\o"CurrentDocument"配置步驟 6-11\o"CurrentDocument"DeviceA 的配置 6-11\o"CurrentDocument"DeviceB 的配置 6-11\o"CurrentDocument"DeviceC 的配置 6-11\o"CurrentDocument"驗證配置 6-12\o"CurrentDocument"配置文件 6-12\o"CurrentDocument"SNTP典型配置舉例 7-13\o"CurrentDocument"組網(wǎng)需求 7-13\o"CurrentDocument"使用版本 7-14\o"CurrentDocument"配置步驟 7-14\o"CurrentDocument"DeviceA 的配置 7-14\o"CurrentDocument"DeviceB 的配置 7-14\o"CurrentDocument"DeviceC 的配置 7-14\o"CurrentDocument"驗證配置 7-15\o"CurrentDocument"配置文件 7-15\o"CurrentDocument"IPv6NTP服務(wù)器/客戶端模式典型配置舉例 8-16\o"CurrentDocument"組網(wǎng)需求 8-16\o"CurrentDocument"使用版本 8-16\o"CurrentDocument"配置步驟 8-16\o"CurrentDocument"DeviceA 的配置 8-16\o"CurrentDocument"DeviceB 的配置 8-16\o"CurrentDocument"DeviceC 的配置 8-17\o"CurrentDocument"驗證配置 8-17\o"CurrentDocument"配置文件 8-18\o"CurrentDocument"IPv6NTP組播模式典型配置舉例 9-18\o"CurrentDocument"組網(wǎng)需求 9-18\o"CurrentDocument"使用版本 9-19\o"CurrentDocument"配置步驟 9-19\o"CurrentDocument"DeviceC 的配置 9-19DeviceD 的配置 9-19\o"CurrentDocument"DeviceB 的配置 9-20\o"CurrentDocument"DeviceA 的配置 9-20\o"CurrentDocument"驗證配置 9-20\o"CurrentDocument"配置文件 9-21\o"CurrentDocument"10帶身份驗證的NTP廣播模式典型配置舉例 10-22組網(wǎng)需求 10-22使用版本 10-23\o"CurrentDocument"配置步驟 10-23DeviceC 的配置 10-23DeviceA 的配置 10-23驗證配置 10-24配置文件 10-24\o"CurrentDocument"11相關(guān)資料 11-251簡介本章介紹了與NTP有關(guān)的各種典型配置舉例。2配置前提本文檔不嚴格與具體軟、硬件版本對應(yīng)，如果使用過程中與產(chǎn)品實際情況有差異，請參考相關(guān)產(chǎn)品手冊，或以設(shè)備實際情況為準(zhǔn)。本文檔中的配置均是在實驗室環(huán)境下進行的配置和驗證，配置前設(shè)備的所有參數(shù)均采用出廠時的缺省配置。如果您已經(jīng)對設(shè)備進行了配置，為了保證配置效果，請確認現(xiàn)有配置和以下舉例中的配置不沖突。本文檔假設(shè)您已了解NTP特性。NTP服務(wù)器/客戶端模式典型配置舉例組網(wǎng)需求如圖1-1所示,網(wǎng)絡(luò)中有一臺時間服務(wù)器 DeviceA,為網(wǎng)絡(luò)中的其它設(shè)備提供精確的時間服務(wù)，為保證網(wǎng)絡(luò)中的所有設(shè)備能保持一致、 統(tǒng)一的時鐘，現(xiàn)要求配置NTP服務(wù)器/客戶端模式，使所有設(shè)備能從時間服務(wù)器DeviceA上獲得時鐘同步。圖1配置NTP服務(wù)器/客戶端模式組網(wǎng)圖使用版本本舉例是在S5130EI_E-CMW710-R3106 版本上進行配置和驗證的。配置步驟DeviceA的配置配置接口Vlan-interface2的IP地址。<DeviceA>system-view[DeviceA]interfaceVlan-interface2[DeviceA-Vlan-interface2]ipaddress1.0.1.1124[DeviceA-Vlan-interface2]quit開啟NTP功能。[DeviceA]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceA]ntp-servicerefclock-master2DeviceB的配置配置接口的IP地址，配置步驟這里省略。開啟NTP功能。<DeviceB>system-view[DeviceB]ntp-serviceenable設(shè)置NTPServer為DeviceB的時間服務(wù)器。[DeviceB]ntp-serviceunicast-server1.0.1.11DeviceC的配置配置接口的IP地址，配置步驟這里省略。開啟NTP功能。<DeviceC>system-view[DeviceC]ntp-serviceenable設(shè)置NTPServer為DeviceC的時間服務(wù)器。[DeviceC]ntp-serviceunicast-server1.0.1.11驗證配置#以上配置完成后，DeviceB和DeviceC向DeviceA進行時間同步。以 DeviceB為例，查看 NTP的運行狀態(tài)。[DeviceB]displayntp-servicestatusClockstatus:synchronizedClockstratum:3Systempeer:1.0.1.11Localmode:clientReferenceclockID:1.0.1.11Leapindicator:00Clockjitter:0.003479sStability:0.000ppsClockprecision:2A-15Rootdelay:1.95313msRootdispersion:28.38135msReferencetime:d5ed8cd5.577006ea Wed,Sep25201316:24:53.341此時DeviceB已經(jīng)與DeviceA同步，層數(shù)比DeviceA的層數(shù)大1,為3。#查看DeviceB的NTP會話信息，可以看到DeviceB與DeviceA建立了連接。[DeviceB]displayntp-servicesessionssource reference strareachpoll nowoffsetdelaydisper********************************************************************************[12345]1.0.1.11 127.127.1.0 2 255 64 38-10.221.95313.3416Notes:1source(master),2source(peer),3selected,4candidate,5 configured.Totalsessions:1配置文件?DeviceA上的配置#interfaceVlan-interface2ipaddress1.0.1.11255.255.255.0#ntp-serviceenablentp-servicerefclock-master2#?DeviceB上的配置#interfaceVlan-interface2ipaddress1.0.1.12255.255.255.0#ntp-serviceenablentp-serviceunicast-server1.0.1.11#?DeviceC上的配置#interfaceVlan-interface2ipaddress1.0.1.13255.255.255.0#ntp-serviceenablentp-serviceunicast-server1.0.1.11#NTP廣播模式典型配置舉例組網(wǎng)需求如圖1-5所示,網(wǎng)絡(luò)中設(shè)備較多，所有設(shè)備都位于同一個網(wǎng)段( 3.0.1.0/24)中，為了便于管理,現(xiàn)要求通過配置NTP廣播模式，使網(wǎng)絡(luò)中的設(shè)備擁有一致，統(tǒng)一的時間。圖2NTP廣播模式配置組網(wǎng)圖Vlan-int230133(24Vlan-ini；30.1.WM4DeviceADeviceBVlan-int23.0134.24M自3.013124DeviceVlan-int230133(24Vlan-ini；30.1.WM4DeviceADeviceBVlan-int23.0134.24M自3.013124DeviceC11/Ian-int230132^4DeviceEDeviceD使用版本本舉例是在DeviceEDeviceD使用版本本舉例是在S5130EI_E-CMW710-R3106 版本上進行配置和驗證的。配置步驟DeviceC的配置開啟NTP功能。<DeviceC>system-view[DeviceC]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceC]ntp-servicerefclock-master2配置接口Vlan-interface2的IP地址。[DeviceC]interfaceVlan-interface2[DeviceC-Vlan-interface2]ipaddress3.0.1.3124配置DeviceC為廣播服務(wù)器，從Vlan-interface2向網(wǎng)絡(luò)中發(fā)送NTP廣播報文。[DeviceC-Vlan-interface2]ntp-servicebroadcast-serverDeviceA的配置配置接口的IP地址，配置步驟這里省略。開啟NTP功能。<DeviceA>system-view[DeviceA]ntp-serviceenable配置接口Vlan-interface2的IP地址。[DeviceA]interfaceVlan-interface2[DeviceA-Vlan-interface2]ipaddress3.0.1.3324#設(shè)置為廣播客戶端，從Vlan-inteface2監(jiān)聽廣播消息。[DeviceA-Vlan-interface2]ntp-servicebroadcast-client百說明DeviceB、DeviceD和DeviceE的配置與DeviceA相同，此處不再贅述。4.4驗證配置#以DeviceA為例，查看NTP的運行狀態(tài)。[DeviceA-Vlan-interface2]displayntp-servicestatusClockstatus:synchronizedClockstratum:3Systempeer:3.0,1.31Localmode:bclientReferenceclockID:3.0,1.31Leapindicator:00Clockjitter:0.000061sStability:0.000ppsClockprecision:2A-14Rootdelay:0.00000msRootdispersion:7951,43127msReferencetime:d5ee8d88.2faabed0 Thu,Sep26201310:40:08,186此時DeviceA已經(jīng)與DeviceC同步，層數(shù)比DeviceC的層數(shù)大1,為3。#查看DeviceA的NTP會話信息，可以看到DeviceA與DeviceC建立了連接。[DeviceA-Vlan-interface2]displayntp-servicesessionssource reference strareachpoll nowoffsetdelaydisper********************************************************************************[1234]3,0,1,31 127.127.1,0 2 254 64 82-2.1900.00007937.5Notes:1source(master),2source(peer),3selected,4candidate,5 configured.Totalsessions:14.5配置文件?設(shè)備DeviceC#interfaceVlan-interface2ipaddress3.0,1,31255.255.255.0ntp-servicebroadcast-server#ntp-serviceenablentp-servicerefclock-master2#設(shè)備DeviceAinterfaceVlan-interface2ipaddress3.0.1.33255.255.255.0ntp-servicebroadcast-client#ntp-serviceenablentp-servicebroadcast-client#?設(shè)備DeviceB#interfaceVlan-interface2ipaddress3.0.1.30255.255.255.0ntp-servicebroadcast-client#ntp-serviceenablentp-servicebroadcast-client#?設(shè)備DeviceD#interfaceVlan-interface2ipaddress3.0.1.32255.255.255.0ntp-servicebroadcast-client#ntp-serviceenablentp-servicebroadcast-client#?設(shè)備DeviceE#interfaceVlan-interface2ipaddress3.0.1.34255.255.255.0ntp-servicebroadcast-client#ntp-serviceenablentp-servicebroadcast-client#5NTP組播模式典型配置舉例組網(wǎng)需求如圖1-6所示,網(wǎng)絡(luò)中有一臺時間服務(wù)器DeviceC,網(wǎng)絡(luò)中設(shè)備較多，而且這些設(shè)備分布在不同網(wǎng)段中，為了便于管理，現(xiàn)要求配置 NTP組播模式，使網(wǎng)絡(luò)中的設(shè)備擁有統(tǒng)一，一致的時間。圖3配置NTP組播模式組網(wǎng)圖Vlan-int2DeviceC(NTPServer)Vlan-int23.0.1.32/24DeviceDVlan-int2DeviceC(NTPServer)Vlan-int23.0.1.32/24DeviceD使用版本本舉例是在S5130EI_E-CMW710-R3106 版本上進行配置和驗證的。配置步驟DeviceC的配置開啟NTP功能。<DeviceC>system-view[DeviceC]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceC]ntp-servicerefclock-master2配置接口Vlan-interface2的IP地址。[DeviceC]interfaceVlan-interface2[DeviceC-Vlan-interface2]ipaddress3.0.1,3124設(shè)置DeviceC為組播服務(wù)器，從VLAN接口2發(fā)送組播報文。[DeviceC-Vlan-interface2]ntp-servicemulticast-serverDeviceD的配置開啟NTP功能。<DeviceD>system-view[DeviceD]ntp-serviceenable配置接口Vlan-interface2的IP地址。[DeviceD]interfaceVlan-interface2[DeviceD-Vlan-interface2]ipaddress3.0,1,3224設(shè)置DeviceD為組播客戶端，從VLAN接口2監(jiān)聽組播報文。[DeviceD-Vlan-interface2]ntp-servicemulticast-clientDeviceB的配置配置接口的IP地址，配置步驟這里省略。開啟NTP功能。<DeviceB>system-view[DeviceB]ntp-serviceenable設(shè)置DeviceB為組播客戶端，從 VLAN接口2監(jiān)聽組播報文。[DeviceB]interfaceVlan-interface2[DeviceB-Vlan-interface2]ntp-servicemulticast-client[DeviceB-Vlan-interface2]quit由于DeviceA與DeviceC不在同一網(wǎng)段，所以DeviceB上需要配置組播功能，否則DeviceA收不到DeviceC發(fā)出的組播報文。配置組播功能。[DeviceB]multicastrouting[DeviceB]interfacevlan-interface 2[DeviceB-Vlan-interface2]pimdm[DeviceB-Vlan-interface2]quit[DeviceB]vlan3[DeviceB-vlan3]portGigabitEthernet1/0/1[DeviceB-vlan3]quit[DeviceB]interfacevlan-interface3[DeviceB-Vlan-interface3]ipaddress1.0.1.1024[DeviceB-Vlan-interface3]igmpenable[DeviceB-Vlan-interface3]igmpstatic-group224.0.1.1[DeviceB-Vlan-interface3]quit[DeviceB]igmp-snooping[DeviceB-igmp-snooping]quit[DeviceB]interfaceGigabitEthernet1/0/1[DeviceB-GigabitEthernet1/0/1]igmp-snoopingstatic-group224.0.1.1vlan 3DeviceA的配置開啟NTP功能。<DeviceA>system-view[DeviceA]ntp-serviceenable配置接口Vlan-interface3的IP地址。[DeviceA]interfaceVlan-interface3[DeviceA-Vlan-interface3]ipaddress1.0.1.1124設(shè)置DeviceA為組播客戶端，從 VLAN接口3監(jiān)聽組播報文。[DeviceA-Vlan-interface3]ntp-servicemulticast-client驗證配置#以DeviceA為例，查看 NTP的運行狀態(tài)。[DeviceA-Vlan-interface3]displayntp-servicestatusClockstatus:synchronizedClockstratum:3Systempeer:3.0.1.31Localmode:bclientReferenceclockID:3.0.1.31Leapindicator:00Clockjitter:0.000061sStability:0.000ppsClockprecision:2A-14Rootdelay:1.69373msRootdispersion:1950.18005msReferencetime:d5ee9b15.2f3a684d Thu,Sep26201311:37:57.184此時DeviceA已經(jīng)與DeviceC同步，層數(shù)比DeviceC的層數(shù)大1，為3。配置文件?設(shè)備DeviceA#ntp-serviceenable#interfaceVlan-interface3ipaddress1.0.1.11255.255.255.0ntp-servicemulticast-client#?設(shè)備DeviceB#ntp-serviceenable#multicastrouting#igmp-snooping#interfaceVlan-interface2ipaddress3.0.1.30255.255.255.0pimdmntp-servicemulticast-client#interfaceVlan-interface3ipaddress1.0.1.10255.255.255.0igmpenableigmpstatic-group224.0.1.1#interfaceGigabitEthernet1/0/1portaccessvlan3igmp-snoopingstatic-group224.0.1.1vlan3#?設(shè)備DeviceC

ntp-serviceenablentp-servicerefclock-master2interfaceVlan-interface2ipaddress3.0.1.31255.255.255.0ntp-servicemulticast-server#?設(shè)備DeviceD#ntp-serviceenable#interfaceVlan-interface2ipaddress3.0.1.32255.255.255.0ntp-servicemulticast-client#6帶身份驗證的NTP客戶端/服務(wù)器模式典型配置舉例組網(wǎng)需求為保證網(wǎng)絡(luò)中的所網(wǎng)絡(luò)中有一臺時間服務(wù)器 DeviceA,為網(wǎng)絡(luò)中的其它設(shè)備提供精確的時間服務(wù),為保證網(wǎng)絡(luò)中的所有設(shè)備能保持一致、統(tǒng)一的時鐘，現(xiàn)要求：配置NTP服務(wù)器/客戶端模式，使所有設(shè)備能從時間服務(wù)器 DeviceA上獲得時鐘同步。? 設(shè)備在獲得時鐘同步前，需要通過 DeviceA的NTP驗證。圖4帶身份驗證的NTP客戶端/服務(wù)器模式典型配置舉例組網(wǎng)圖使用版本本舉例是在S5130EIE-CMW710-R3106 版本上進行配置和驗證的。配置步驟DeviceA的配置配置接口Vlan-interface2的IP地址。<DeviceA>system-view[DeviceA]interfaceVlan-interface2[DeviceA-Vlan-interface2]ipaddress1.0.1.1124開啟NTP服務(wù)。[DeviceA]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceA]ntp-servicerefclock-master2在DeviceA上啟動NTP驗證功能。[DeviceA]ntp-serviceauthenticationenable創(chuàng)建編號為 42的NTP驗證密鑰，密鑰值為aNiceKey，以明文形式輸入。[DeviceA]ntp-serviceauthentication-keyid42authentication-modemd5simple aNiceKey配置編號為42的密鑰為可信密鑰。[DeviceA]ntp-servicereliableauthentication-keyid42DeviceB的配置配置接口的IP地址，配置步驟這里省略。開啟NTP服務(wù)。<DeviceB>system-view[DeviceB]ntp-serviceenable在DeviceB上啟動NTP驗證功能。[DeviceB]ntp-serviceauthenticationenable創(chuàng)建編號為 42的NTP驗證密鑰，密鑰值為aNiceKey，以明文形式輸入。[DeviceB]ntp-serviceauthentication-keyid42authentication-modemd5simple aNiceKey配置編號為42的密鑰為可信密鑰。[DeviceB]ntp-servicereliableauthentication-keyid42設(shè)置DeviceA為DeviceB的NTP服務(wù)器，并將該服務(wù)器與編號為42的密鑰關(guān)聯(lián)。[DeviceB]ntp-serviceunicast-server1.0.1.11authentication-keyid 42以上配置將使得 DeviceB與DeviceA進行時間同步。DeviceC的配置配置接口的IP地址，配置步驟這里省略。開啟NTP服務(wù)。<DeviceC>system-view[DeviceC]ntp-serviceenable在DeviceC上啟動NTP驗證功能。[DeviceC]ntp-serviceauthenticationenable創(chuàng)建編號為 42的NTP驗證密鑰，密鑰值為aNiceKey，以明文形式輸入。[DeviceC]ntp-serviceauthentication-keyid42authentication-modemd5simple aNiceKey配置編號為42的密鑰為可信密鑰。[DeviceC]ntp-servicereliableauthentication-keyid42設(shè)置DeviceA為DeviceC的NTP服務(wù)器，并將該服務(wù)器與編號為42的密鑰關(guān)聯(lián)。[DeviceC]ntp-serviceunicast-server1.0.1.11authentication-keyid 42以上配置將使得 DeviceC與DeviceA進行時間同步。驗證配置完成上述配置后，DeviceB、DeviceC可以與DeviceA的時間同步。同步后查看 DeviceB的狀態(tài)。可以看出，DeviceB已經(jīng)與DeviceA同步，層數(shù)比DeviceA的層數(shù)大1，為3。[DeviceB]displayntp-servicestatusClockstatus:synchronizedClockstratum:3Systempeer:1.0.1.11Localmode:clientReferenceclockID:1.0.1.11Leapindicator:00Clockjitter:0.005096sStability:0.000ppsClockprecision:2A-10Rootdelay:0.00655msRootdispersion:1.15869msReferencetime:d0c62687.ab1bba7d Mon,Sep30201316:06:26.764查看DeviceB的NTP服務(wù)的所有 IPv4會話信息，可以看到DeviceB與DeviceA建立了會話。[DeviceB]displayntp-servicesessionssource reference strareachpoll nowoffsetdelaydisper********************************************************************************[1245]1.0.1.11 127.127.1.0 2 1 64 519 -0.00.0065 0.0Notes:1source(master),2source(peer),3selected,4candidate,5 configured.Totalsessions:1配置文件?設(shè)備DeviceA#interfaceVlan-interface2ipaddress1.0.1.11255.255.255.0#ntp-serviceenablentp-serviceauthenticationenablentp-serviceauthentication-keyid42authentication-modemd5cipher$c$3$4j3SKCgQWBK3Un41B9U0JXzJX9i7IuNoSqintp-servicereliableauthentication-keyid42ntp-servicerefclock-master2#?設(shè)備DeviceB#interfaceVlan-interface2ipaddress1.0.1.12255.255.255.0#ntp-serviceenablentp-serviceauthenticationenablentp-serviceauthentication-keyid42authentication-modemd5cipher$c$3$22eIc8l796cpudZqiaAZ2SLzIfrgzFTVYn8Xntp-servicereliableauthentication-keyid42ntp-serviceunicast-server1.0.1.11authentication-keyid42#?設(shè)備DeviceC#interfaceVlan-interface2ipaddress1.0.1.13255.255.255.0#ntp-serviceenablentp-serviceauthenticationenablentp-serviceauthentication-keyid42authentication-modemd5cipher$c$3$XJzVmJ1TJbWyYAXpPXxF7JiEOZag8CehibM8ntp-servicereliableauthentication-keyid42ntp-serviceunicast-server1.0.1.11authentication-keyid42#7SNTP典型配置舉例組網(wǎng)需求如圖1-10所示,網(wǎng)絡(luò)中有一臺時間服務(wù)器 DeviceA,為網(wǎng)絡(luò)中的其它網(wǎng)絡(luò)設(shè)備提供精確的時間服務(wù)，為保證網(wǎng)絡(luò)中的所有設(shè)備能保持一致、 統(tǒng)一的時鐘，現(xiàn)要求配置所有網(wǎng)絡(luò)設(shè)備為 SNTP客戶端,使所有設(shè)備能從時間服務(wù)器 DeviceA上獲得時鐘同步。##配置接口的IP地址，配置步驟這里省略。圖5SNTP典型配置舉例組網(wǎng)圖使用版本本舉例是在S5130EI_E-CMW710-R3106 版本上進行配置和驗證的。配置步驟DeviceA的配置配置接口Vlan-interface2的IP地址。<DeviceA>system-view[DeviceA]interfaceVlan-interface2[DeviceA-Vlan-interface2]ipaddress1.0.1.1124開啟NTP功能。[DeviceA]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceA]ntp-servicerefclock-master2DeviceB的配置配置接口的IP地址，配置步驟這里省略。開啟SNTP功能。<DeviceB>system-view[DeviceB]sntpenable設(shè)置DeviceA為DeviceB的時間服務(wù)器。[DeviceB]sntpunicast-server1.0.1.11DeviceC的配置開啟SNTP功能。<DeviceC>system-view[DeviceC]sntpenable設(shè)置DeviceA為DeviceC的時間服務(wù)器。[DeviceC]sntpunicast-server1.0.1.11驗證配置#以上配置完成后，DeviceB和DeviceC向DeviceA進行時間同步。以DeviceB為例，查看DeviceB的NTP會話信息，可以看到DeviceB與DeviceA建立了連接。[DeviceB]displaysntpsessionsSNTPserver Stratum Version Lastreceivetime1.0.1.11 2 4 Thu,Sep26201317:25:09.121 (Synced)7.5配置文件?DeviceA上的配置#interfaceVlan-interface2ipaddress1.0.1.11255.255.255.0#ntp-serviceenablentp-servicerefclock-master2#?DeviceB上的配置#interfaceVlan-interface2ipaddress1.0.1.12255.255.255.0#sntpenablesntpunicast-server1.0.1.11#?DeviceC上的配置#interfaceVlan-interface2ipaddress1.0.1.13255.255.255.0#sntpenablesntpunicast-server1.0.1.118IPv6NTP服務(wù)器/客戶端模式典型配置舉例8.1組網(wǎng)需求8.1組網(wǎng)需求如邕二所示，IPv6網(wǎng)絡(luò)中有一臺時間服務(wù)器DeviceA,為網(wǎng)絡(luò)中的其它設(shè)備提供精確的時間服務(wù)，為彳而向絡(luò)中所有設(shè)備的時間保持一致，現(xiàn)要求配置 IPv6NTP服務(wù)器/客戶端模式，使所有設(shè)備能從時間服務(wù)器DeviceA上獲得時鐘同步。圖6配置IPv6NTP服務(wù)器/客戶端模式組網(wǎng)圖DeviceA(NTPServer)DeviceA(NTPServer)Vlam-intS3000340Vlan-inQ300口-35J6AVlan-inQ300口-35J6AVian-int?3000:.36/6DeviceBDeviceC8.2使用版本8.2使用版本本舉例是在S5130EIE-CMW710-R3106版本上進行配置和驗證的。本舉例是在S5130EIE-CMW710-R3106版本上進行配置和驗證的。8.3配置步驟8.3.1DeviceA8.3.1DeviceA的配置#配置接口Vlan-interface2的IP地址。<DeviceA>system-view[DeviceA]interfacevlan-interface2[DeviceA-Vlan-interface2]ipv6address3000::3464[DeviceA-Vlan-interface2]quit#開啟NTP功能。[DeviceA]ntp-serviceenable#設(shè)置本地時鐘作為參考時鐘，層數(shù)為#設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceA]ntp-servicerefclock-master28.3.2DeviceB8.3.2DeviceB的配置#開啟NTP功能。<DeviceB>system-view[DeviceB]ntp-serviceenable#設(shè)置NTPServer為DeviceB的時間服務(wù)器。[DeviceB]ntp-serviceipv6unicast-server3000::348.3.3DeviceC的配置配置接口的IP地址，配置步驟這里省略。開啟NTP功能。<DeviceC>system-view[DeviceC]ntp-serviceenable設(shè)置NTPServer為DeviceC的時間服務(wù)器。[DeviceC]ntp-serviceipv6unicast-server3000::348.4驗證配置#以上配置完成后，DeviceB和DeviceC向DeviceA進行時間同步。以DeviceB為例，查看NTP的運行狀態(tài)。[DeviceB]displayntp-servicestatusClockstatus:synchronized IClockstratum:3ISystempeer:3000::34Localmode:clientReferenceclockID:95.197.17.40Leapindicator:00Clockjitter:0.003479sStability:0.000ppsClockprecision:2A-15Rootdelay:1.95313msRootdispersion:28.38135msReferencetime:d5ed8cd5.577006ea Wed,Sep25201316:24:53.341此時DeviceB已經(jīng)與DeviceA同步，層數(shù)比DeviceA的層數(shù)大1,為3。#查看DeviceB的NTP會話信息，可以看到 DeviceB與DeviceA建立了連接。[DeviceB]displayntp-serviceipv6sessionsNotes:1source(master),2source(peer),3selected,4candidate,5 configured.Clockstratum:2Pollinterval:64Clockstratum:2Pollinterval:64Offset:0.1272Dispersion:188.47Reference:127.127.1.0Reachabilities:3Lastreceivetime:62Roundtripdelay:1.8158Totalsessions:18.5配置文件?設(shè)備DeviceA#interfaceVlan-interface2ipv6address3000::34/64#ntp-serviceenablentp-servicerefclock-master2#?設(shè)備DeviceB#interfaceVlan-interface2ipv6address3000::35/64#ntp-serviceenablentp-serviceipv6unicast-server3000::34#?設(shè)備DeviceC#interfaceVlan-interface2ipv6address3000::36/64#ntp-serviceenablentp-serviceipv6unicast-server3000::34#9IPv6NTP組播模式典型配置舉例組網(wǎng)需求如圖1-6所示，IPv6網(wǎng)絡(luò)中有一臺時間服務(wù)器 DeviceC,網(wǎng)絡(luò)中設(shè)備較多，而且這些設(shè)備分布在不同網(wǎng)段中，為了便于管理，現(xiàn)要求配置IPv6NTP組播模式，使網(wǎng)絡(luò)中所有設(shè)備的時間保持一致。圖7配置IPv6NTP組播模式組網(wǎng)圖Vlan-int2DeviceC(NTPServer)Vlan-int23000二3/64DeviceDVlan-int2DeviceC(NTPServer)Vlan-int23000二3/64DeviceD使用版本版本上進行配置和驗證的。本舉例是在S5130EIE-CMW710-R3106版本上進行配置和驗證的。配置步驟DeviceC的配置配置路由協(xié)議，以保證各設(shè)備間能夠路由可達，配置步驟這里省略。開啟NTP功能。<DeviceC>system-view[DeviceC]ntp-serviceenable設(shè)置本地時鐘作為參考時鐘，層數(shù)為2。[DeviceC]ntp-servicerefclock-master2配置接口Vlan-interface2的IP地址。[DeviceC]interfaceVlan-interface2[DeviceC-Vlan-interface2]ipv6address3000::264設(shè)置DeviceC為IPv6組播服務(wù)器，從VLAN接口2向組播地址FF24::1發(fā)送NTP組播報文。[DeviceC-Vlan-interface2]ntp-serviceipv6multicast-serverff24::1[DeviceC-Vlan-interface2]quitDeviceD的配置配置路由協(xié)議，以及接口的 IP地址，以保證各設(shè)備間能夠路由可達，配置步驟這里省略。開啟NTP功能。<DeviceD>system-view[DeviceD]ntp-serviceenable設(shè)置DeviceD為組播客戶端，從VLAN接口2監(jiān)聽組播報文。[DeviceD-Vlan-interface2]ntp-serviceipv6multicast-clientff24::1

[DeviceD-Vlan-interface2]quitDeviceB的配置配置路由協(xié)議，以及接口的IP地址，以保證各設(shè)備間能夠路由可達，配置步驟這里省略。開啟NTP功能。<DeviceB>system-view[DeviceB]ntp-serviceenable設(shè)置DeviceB為組播客戶端，從 VLAN接口2監(jiān)聽組播報文。[DeviceB-Vlan-interface2]ntp-serviceipv6multicast-clientff24::1[DeviceB-Vlan-interface2]quitDeviceA收由于DeviceA與DeviceC不在同一網(wǎng)段，所以DeviceB上需要配置組播功能，否則不到DeviceC發(fā)出的組播報文。DeviceA收配置組播功能。[DeviceB]ipv6multicastrouting[DeviceB-mrib6]quit[DeviceB]interfacevlan-interface2[DeviceB-Vlan-interface2]ipv6pimdm[DeviceB-Vlan-interface2]quit[DeviceB]vlan3[DeviceB-vlan3]portGigabitEthernet1/0/1[DeviceB-vlan3]quit[DeviceB]interfacevlan-interface3[DeviceB-Vlan-interface3]mldenable[DeviceB-Vlan-interface3]mldstatic-groupff24::1[DeviceB-Vlan-interface3]quit[DeviceB]mld-snooping[DeviceB-mld-snooping]quit[DeviceB]interfaceGigabitEthernet1/0/1[DeviceB-GigabitEthernet1/0/1]mld-snoopingstatic-groupff24::1vlan3[DeviceB-mld-snooping]quitDeviceA的配置配置路由協(xié)議，以及接口的IP地址，以保證各設(shè)備間能夠路由可達，配置步驟這里省略。開啟NTP功能。<DeviceA>system-view[DeviceA]ntp-serviceenable設(shè)置DeviceA為組播客戶端，從 VLAN接口3監(jiān)聽組播報文。[DeviceA-Vlan-interface3]ntp-serviceipv6multicast-clientff24::1[DeviceA-Vlan-interface3]quit驗證配置#以DeviceA為例，查看 NTP的運行狀態(tài)。[DeviceA]displayntp-servicestatusClockstatus:synchronizedClockstratum:3ISystempeer:3000::2Localmode:bclientReferenceclockID:165.84.121.65Leapindicator:00Clockjitter:0.000061sStability:0.000ppsClockprecision:2A-14Rootdelay:1.69373msRootdispersion:1950.18005msReferencetime:d5ee9b15.2f3a684d Thu,Sep26201311:37:57.184此時DeviceA已經(jīng)與DeviceC同步，層數(shù)比DeviceC的層數(shù)大1,為3。配置文件?設(shè)備DeviceA#ntp-serviceenable#interfaceVlan-interface3ipv6address2000::1/64ntp-serviceipv6multicast-clientff24::1#?設(shè)備DeviceB#ntp-serviceenable#ipv6multicastrouting#mld-snooping#interfaceVlan-interface2ipv6address3000::1/64ipv6pimdmntp-serviceipv6multicast-clientff24::1#interfaceVlan-interface3ipv6address2000::2/64mldenablemldstatic-groupff24::1#interfaceGigabitEthernet1/0/1portaccessvlan3mld-snoopingstatic-groupff24::1vlan3

設(shè)備DeviceC#ntp-serviceenablentp-servicerefclock-master2#interfaceVlan-interface2ipv6address3000::2/64ntp-serviceipv6multicast-serverff24::1#?設(shè)備DeviceD#ntp-serviceenable#interfaceVlan-interface2ipv6address3000::3/64ntp-serviceipv6multicast-clientff24::1#10帶身份驗證的NTP廣播模式典型配置舉例組網(wǎng)需求,為了使網(wǎng)絡(luò)中所有以保證時鐘同步如圖3所示，網(wǎng)絡(luò)中設(shè)備較多，所有設(shè)備都位于同一個網(wǎng)段( 3.0.1.0/24)?,為了使網(wǎng)絡(luò)中所有以保證時鐘同步設(shè)備的時間保持一致，現(xiàn)要求：?配置NTP廣播模式。?NTP廣播客戶端與NTP廣播服務(wù)器進行時間同步前，必須先進行身份驗證,的安全性，防止攻擊者將自己偽裝成為一個時鐘服務(wù)器而對客戶時鐘發(fā)起攻擊。圖8帶身份驗證的NTP廣播模式典型配置舉例組網(wǎng)圖Vlan-int2301