(Optional) Configuring the Multicast Mode

The NTP multicast mode can be configured to synchronize clocks in a multicast domain.

Procedure

  • Configure an NTP multicast server.
    1. Run system-view

      The system view is displayed.

    2. Run ntp-service authentication-keyid keyId authentication-mode { md5 | hmac-sha256 } { password | cipher password }

      The NTP authentication key is set.

      Using the HMAC-SHA256 algorithm for NTP authentication is recommended.

      The system automatically verifies the strength of an entered key. Only the key that meets the strength requirements can be configured. To disable key strength check, run the ntp authentication-password complexity-check disable command.

      Disabling the key strength check function causes security risks. Therefore, you are advised not to run this command.

    3. Run interface interface-type interface-number

      The view of the interface sending NTP multicast messages is displayed.

    4. Run ntp-service multicast-server [ ip-address ] [ authentication-keyid key-id | ttl ttl-number | version number | port port-number ] * or ntp-service multicast-server ipv6 [ ipv6Addr ] [ authentication-keyid keyid | ttl ttl-number | port portNumber ] *

      The local router is configured as an NTP multicast server.

      The NTP multicast server periodically sends clock-synchronization packets to the configured multicast IP address.

    5. Run commit

      The configuration is committed.

  • Configure an NTP multicast client.
    1. Run system-view

      The system view is displayed.

    2. Run ntp-service authentication-keyid keyId authentication-mode { md5 | hmac-sha256 } { password | cipher password }

      The NTP authentication key is set.

      Using the HMAC-SHA256 algorithm for NTP authentication is recommended.

      The system automatically verifies the strength of an entered key. Only the key that meets the strength requirements can be configured. To disable key strength check, run the ntp authentication-password complexity-check disable command.

      Disabling the key strength check function causes security risks. Therefore, you are advised not to run this command.

    3. (Optional) Run ntp-service max-dynamic-sessions number

      The maximum number of dynamic sessions allowed to be set up is set.

      Running the ntp-service max-dynamic-sessions command does not affect existing NTP sessions. When the number of sessions reaches the maximum number, no more sessions can be set up.

    4. Run interface interface-type interface-number

      The view of the interface receiving NTP multicast messages is displayed.

    5. Run ntp-service multicast-client [ ip-address | ipv6 ipv6-address ]

      The local router is configured as an NTP multicast client.

      The NTP multicast client listens to the multicast NTP packets sent from the server and synchronizes the local clock.

    6. Run commit

      The configuration is committed.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >