H3C S5500-EI series Istruzioni per l'installazione
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 NTP Configuration Commands ..................................................................................1-1
1.1 NTP Configuration Commands.......................................................................................... 1-1
1.1.1 display ntp-service sessions ................................................................................... 1-1
1.1.2 display ntp-service status........................................................................................ 1-3
1.1.3 display ntp-service trace ......................................................................................... 1-4
1.1.4 ntp-service access .................................................................................................. 1-5
1.1.5 ntp-service authentication enable ........................................................................... 1-6
1.1.6 ntp-service authentication-keyid.............................................................................. 1-7
1.1.7 ntp-service broadcast-client .................................................................................... 1-8
1.1.8 ntp-service broadcast-server................................................................................... 1-9
1.1.9 ntp-service in-interface disable ............................................................................... 1-9
1.1.10 ntp-service max-dynamic-sessions ..................................................................... 1-10
1.1.11 ntp-service multicast-client.................................................................................. 1-11
1.1.12 ntp-service multicast-server ................................................................................ 1-11
1.1.13 ntp-service reliable authentication-keyid............................................................. 1-12
1.1.14 ntp-service source-interface................................................................................ 1-13
1.1.15 ntp-service unicast-peer...................................................................................... 1-14
1.1.16 ntp-service unicast-server ................................................................................... 1-15
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-1
Chapter 1 NTP Configuration Commands
Note:
The local clock of an S5500-EI Ethernet switch cannot be set as a reference clock. It
can serve as a reference clock source to synchronize the clock of other devices only
after it is synchronized.
1.1 NTP Configuration Commands
1.1.1 display ntp-service sessions
Syntax
display ntp-service sessions [ verbose ]
View
Any view
Parameters
verbose: Displays the detailed information of all NTP sessions.
Description
Use the display ntp-service sessions command to view the information of all NTP
sessions. Without the verbose keyword, this command will display only the brief
information of all NTP service sessions.
Examples
# View the brief information of NTP service sessions.
<Sysname> display ntp-service sessions
source reference stra reach poll now offset delay disper
**************************************************************************
[12345]192.168.0.28 127.127.1.0 2 1 64 1 31.1 9.0 0.0
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
Total associations : 1
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-2
Table 1-1 Description on the fields of the display ntp-service sessions command
Field Description
source IP address of the clock source
reference
Reference clock ID of the clock source
1) If the reference clock is the local clock, the value of this field is
related to the value of the stra field:
zWhen the value of the stra field is 0 or 1, this field will be
“LOCL”;
zWhen the stra field has another value, this filed will be the IP
address of the local clock
2) If the reference clock is the clock of another device on the
network, the value of this field will be the IP address of that
device.
stra Stratum level of the clock source
reach Reachability count of the clock source. 0 indicates that the clock
source in unreachable
poll Poll interval, namely the maximum interval between successive
NTP messages.
now
The length of time in minutes from when the last NTP message was
received or when the local clock was last updated to the current time
The time is in second by default. If the time length is greater than
2048 seconds, it is displayed in minute; if greater than 300 minutes,
in hour; if greater than 96 hours, in day.
offset The offset of the system clock relative to the reference clock, in
milliseconds
delay the roundtrip delay from the local device to the clock source, in
milliseconds
disper The maximum error of the system clock relative to the reference
source.
[12345]
1: Clock source selected by the system, namely the current
reference source, with a system clock stratum level of ≤15
2: Stratum level of this system source is ≤15
3: This clock source has passed the clock selection process
4: This clock source is a candidate clock source
5: This clock source was created by a configuration command
Total
associations Total number of associations
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-3
Note:
When a device is working in the NTP broadcast/multicast server mode, the display
ntp-service sessions command executed on the device will not display the NTP
session information corresponding to the broadcast/multicast server, but the sessions
will be counted in the total number of associations.
1.1.2 display ntp-service status
Syntax
display ntp-service status
View
Any view
Parameters
None
Description
Use the display ntp-service status command to view the NTP service status
information.
Examples
# View the NTP service status information.
<Sysname> display ntp-service status
Clock status: unsynchronized
Clock stratum: 16
Reference clock ID: none
Nominal frequency: 100.0000 Hz
Actual frequency: 100.0000 Hz
Clock precision: 2^18
Clock offset: 0.0000 ms
Root delay: 0.00 ms
Root dispersion: 0.00 ms
Peer dispersion: 0.00 ms
Reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-4
Table 1-2 Description on the fields of the display ntp-service status command
Field Description
Clock status Status of the system clock
Clock stratum Stratum level of the local clock
Reference clock
ID
After the system clock is synchronized to a remote time server
or a local reference source, this field indicates the address of
the remote time server or the identifier of the local clock source:
zWhen the local clock has a stratum level of 1, the value of
this field is “LOCL”;
zWhen the local clock has another value, the value of this
filed is the IP address of the local clock).
Nominal
frequency The nominal frequency of the local system hardware clock
Actual frequency The actual frequency of the local system hardware clock
Clock precision The precision of the system clock
Clock offset The offset of the system clock relative to the reference source
Root delay The roundtrip delay from the local device to the primary
reference source
Root dispersion The maximum error of the system clock relative to the primary
reference source
Peer dispersion The maximum error of the system clock relative to the reference
source
Reference time Reference timestamp
1.1.3 display ntp-service trace
Syntax
display ntp-service trace
View
Any view
Parameters
None
Description
Use the display ntp-service trace command view the brief information of each NTP
server along the NTP server chain from the local device back to the primary reference
source.
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-5
The display ntp-service trace command is available only if the local device can ping
through all the devices on the NTP server chain; otherwise, this command will fail to
display all the NTP servers on the NTP chain due to timeout.
Examples
# View the brief information of each NTP server from the local device back to the
primary reference source.
<Sysname> display ntp-service trace
server 127.0.0.1,stratum 2, offset -0.013500, synch distance 0.03154
server 133.1.1.1,stratum 1, offset -0.506500, synch distance 0.03429
refid LOCL
The information above shows an NTP server chain for the server 127.0.0.1: The server
127.0.0.1 is synchronized to the server 133.1.1.1, and the server 133.1.1.1 is
synchronized to the local clock source.
Table 1-3 Description on the fields of the display ntp-service trace command
Field Description
server IP address of the NTP server
stratum The stratum level of the corresponding system clock
offset The clock offset relative to the upper-level clock
synch distance The synchronization distance relative to the upper-level clock
refid
Identifier of the primary reference source. When the stratum level
of the primary reference clock is 0, it is displayed as LOCL;
otherwise, it is displayed as the IP address of the primary
reference clock.
1.1.4 ntp-service access
Syntax
ntp-service access { peer | query |server |synchronization } acl-number
undo ntp-service access { peer | query |server |synchronization }
View
System view
Parameters
peer: Specifies to permit full access.
query: Specifies to permit control query.
server: Specifies to permit server access and query.
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-6
synchronization: Specifies to permit server access only.
acl-number: Basic ACL number, in the range of 2000 to 2999
Description
Use the ntp-service access command to configure the NTP service access-control
right to the local device.
Use the undo ntp-service access command to remove the configured NTP service
access-control right to the local device.
By default, the local NTP service access-control right is set to peer.
From the highest NTP service access-control right to the lowest one are peer, server,
synchronization, and query. When a device receives an NTP request, it will perform
an access-control right match and will use the first matched right.
Note:
zThe ntp-service access command provides only a minimum degree of security
protection. A more secure method is identity authentication.
zBefore specifying an ACL number in the ntp-service access command, make sure
you have already created and configured this ACL.
Examples
# Configure devices on the subnet 10.10.0.0/16 to have the full access right to the local
device.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 10.10.0.0 0.0.255.255
[Sysname-acl-basic-2001] quit
[Sysname] ntp-service access peer 2001
1.1.5 ntp-service authentication enable
Syntax
ntp-service authentication enable
undo ntp-service authentication enable
View
System view
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-7
Parameters
None
Description
Use the ntp-service authentication enable command to enable NTP authentication.
Use the undo ntp-service authentication enable command to disable NTP
authentication.
By default, NTP authentication is disabled.
Examples
# Enable NTP authentication.
<Sysname> system-view
[Sysname] ntp-service authentication enable
1.1.6 ntp-service authentication-keyid
Syntax
ntp-service authentication-keyid keyid authentication-mode md5 value
undo ntp-service authentication-keyid keyid
View
System view
Parameters
keyid: Authentication key ID, in the range of 1 to 4294967295.
authentication-mode md5 value: Specifies to use the MD5 algorithm for key
authentication, where value represents authentication key and is a string of 1 to 32
characters.
Description
Use the ntp-service authentication-keyid command to set the NTP authentication
key.
Use the undo ntp-service authentication-keyid command to remove the set NTP
authentication key.
By default, no NTP authentication key is set.
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-8
Caution:
zPresently the system supports only the MD5 algorithm for key authentication.
zYou can set a maximum of 1,024 keys for each device.
zIf an NTP authentication key is specified as a trusted key, the key automatically
changes to not trusted after you delete the key. In this case, you do not need to
execute the undo ntp-service reliable authentication-keyid command.
Examples
# Set an MD5 authentication key, with the key ID of 10 and key value of BetterKey.
<Sysname> system-view
[Sysname] ntp-service authentication-keyid 10 authentication-mode md5
BetterKey
1.1.7 ntp-service broadcast-client
Syntax
ntp-service broadcast-client
undo ntp-service broadcast-client
View
VLAN interface view
Parameters
None
Description
Use the ntp-service broadcast-client command to configure the device to work in the
NTP broadcast client mode.
Use the undo ntp-service broadcast-client command to remove the device as an
NTP broadcast client.
Examples
# Configure the device to work in the broadcast client mode and receive NTP broadcast
messages on VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ntp-service broadcast-client
Command Manual – NTP
H3C S5500-EI Series Ethernet Switches Chapter 1 NTP Configuration Commands
1-9
1.1.8 ntp-service broadcast-server
Syntax
ntp-service broadcast-server [ authentication-keyid keyid | version number ] *
undo ntp-service broadcast-server
View
VLAN interface view
Parameters
authentication-keyid keyid: Specifies the key ID to be used for sending broadcast
messages to broadcast clients, where keyid is in the range of 1 to 4294967295. This
parameter is not meaningful if authentication is not required.
version number: Specifies the NTP version, where number is in the range of 1 to 3 and
defaults to 3.
Description
Use the ntp-service broadcast-server command to configure the device to work in
the NTP broadcast server mode.
Use the undo ntp-service broadcast-server command to remove the device as an
NTP broadcast server.
Examples
# Configure the device to work in the broadcast server mode and send NTP broadcast
messages on VLAN-interface 1, using key 4 for encryption, and set the NTP version to
3.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ntp-service broadcast-server authentication-keyid
4 version 3
1.1.9 ntp-service in-interface disable
Syntax
ntp-service in-interface disable
undo ntp-service in-interface disable
View
VLAN interface view
Altri manuali per S5500-EI series
22
Indice
Altri manuali H3C Interruttore
H3C
H3C S3100 Series Manuale utente
H3C
H3C S7500 Series Manuale utente
H3C
H3C S10500X-G Series Manuale del proprietario
H3C
H3C S6300 Series Manuale utente
H3C
H3C S12500X-2L Manuale utente
H3C
H3C H3C S5100-SI Manuale utente
H3C
H3C s5820x series Manuale utente
H3C
H3C s5800 series Manuale utente
H3C
H3C S9500 Series Manuale utente
H3C
H3C S10500X Series Manuale operativo e di manutenzione
H3C
H3C SecPath NSQ1FAB12D0 Manuale utente
H3C
H3C H3C S5100-SI Manuale utente
H3C
H3C S6861 Series Manuale utente
H3C
H3C S5500-EI series Istruzioni per l'installazione
H3C
H3C S12500X-AF Series Manuale utente
H3C
H3C H3C S5600 Series Manuale utente
H3C
H3C H3C S3600 Series Istruzioni per l'installazione
H3C
H3C S3100V2 Series Manuale utente
H3C
H3C S5830V2 series Manuale utente
H3C
H3C S9820-64H Manuale utente
