//support.ntp.org/bin/view/Support/AccessRestrictions>
#mightalsobehelpful.
#
#Notethat"restrict"appliestobothserversandclients,soaconfiguration
#thatmightbeintendedtoblockrequestsfromcertainclientscouldalsoend
#upblockingrepliesfromyourownupstreamservers.
#Bydefault,exchangetimewitheverybody,butdon'tallowconfiguration.
#restrict-4defaultkodnotrapnomodifynopeernoquery
#restrict-6defaultkodnotrapnomodifynopeernoquery
#Localusersmayinterrogatethentpservermoreclosely.
restrict127.0.0.1
restrict:
:
1
#Clientsfromthis（example!
）subnethaveunlimitedaccess,butonlyif
#cryptographicallyauthenticated.
restrictdefaultnomodify
#Ifyouwanttoprovidetimetoyourlocalsubnet,changethenextline.
#（Again,theaddressisanexampleonly.）
#broadcast192.168.123.255
#Ifyouwanttolistentotimebroadcastsonyourlocalsubnet,de-commentthe
#nextlines.Pleasedothisonlyifyoutrusteverybodyonthenetwork!
disableauth
broadcastclient
root@localhost:
/etc#chkconfigntp
ntpon
root@localhost:
/etc#date
SatJan801:
23:
56CST2011
root@localhost:
/etc#date-u
FriJan717:
23:
59UTC2011
root@localhost:
/etc#
交换机NTP配置及NTP状态：
6850-1->showconfigurationsnapshotntp
!
NTP:
ntpserver10.1.53.4minpoll4prefer
ntpbroadcast-clientenable
ntpbroadcast-delay4000
ntpclientenable
6850-1->showntpstatus
Currenttime:
Fri,Jan7201117:
25:
57.463（UTC）,
LastNTPupdate:
Fri,Jan7201117:
25:
33.130（UTC）,
Serverreference:
10.1.53.4,
Clientmode:
enabled,
Broadcastclientmode:
enabled,
Broadcastdelay（microseconds）:
4000,
Serverqualification:
synchronized,
Stratum:
16,
MaximumAssociationsAllowed:
32,
Authentication:
disabled,
SourceIPConfiguration:
default
6850-1->showntpserverstatus
IPaddress=10.1.53.4,
Hostmode=client,
Peermode=server,
Prefer=yes,
Version=4,
Key=0,
Stratum=3,
Minpoll=4（16seconds）,
Maxpoll=10（1024seconds）,
Delay=0.016seconds,
Offset=0.066seconds,
Dispersion=0.017seconds
Rootdistance=0.000,
Precision=-20,
ReferenceIP=127.127.1.0,
Status=configured:
reachable:
synchronizationpeer,
Uptimecount=10986seconds,
Reachability=ff,
Unreachablecount=0,
Statsresetcount=7367seconds,
Packetssent=162,
Packetsreceived=162,
Duplicatepackets=5,
Bogusorigin=0,
Badauthentication=0,
Baddispersion=0,
LastEvent=peerchangedtoreachable,
6850-1->showntpclient
Currenttime:
Fri,Jan7201117:
26:
20.813（UTC）,
LastNTPupdate:
Fri,Jan7201117:
25:
33.130（UTC）,
Serverreference:
10.1.53.4,
Clientmode:
enabled,
Broadcastclientmode:
enabled,
Broadcastdelay（microseconds）:
4000,
Serverqualification:
synchronized
6850-1->showntpclientserver-list
Legends:
+activepeer,-passivepeer,=client,*currentsystempeer,
^broadcastserver,'broadcastclient
ModeIPAddressVerKeyStDelayOffsetDisp
----+-----------------+---+-------+----+----------+-----------------+----------
*10.1.53.44030.0160.0660.017
修改交换机系统时间：
6850-1->systemtime13:
22:
30
6850-1->showntpstatus
Currenttime:
Fri,Jan7201119:
22:
34.366（UTC）,
LastNTPupdate:
Fri,Jan7201117:
29:
53.130（UTC）,
Serverreference:
10.1.53.4,
Clientmode:
enabled,
Broadcastclientmode:
enabled,
Broadcastdelay（microseconds）:
4000,
Serverqualification:
synchronized,
Stratum:
16,
MaximumAssociationsAllowed:
32,
Authentication:
disabled,
SourceIPConfiguration:
default
大概十分钟后交换机系统时间自动进行同步：
6850-1->showntpstatus
Currenttime:
Fri,Jan7201117:
39:
23.308（UTC）,
LastNTPupdate:
Fri,Jan7201117:
39:
14.224（UTC）,
Serverreference:
10.1.53.4,
Clientmode:
enabled,
Broadcastclientmode:
enabled,
Broadcastdelay（microseconds）:
4000,
Serverqualification:
synchronized,
Stratum:
16,
MaximumAssociationsAllowed:
32,
Authentication:
disabled,
SourceIPConfiguration:
default
PC上的时间同步
两台交换机详细配置
6850-1:
6850-1->showconfigurationsnapshotall
!
StackManager:
!
Chassis:
systemnamevxTarget
!
Configuration:
!
VLAN:
vlan1enablename"VLAN1"
vlan2enablename"VLAN2"
vlan2portdefault1/2
vlan100enablename"VLAN100"
vlan100portdefault1/1
!
VLANSL:
!
IP:
ipserviceall
ipinterfacedhcp-clientvlan1ifindex1
ipinterface"vlan2"address10.1.53.254mask255.255.255.0vlan2ifindex2
ipinterface"vlan100"address172.16.1.1mask255.255.255.252vlan100ifindex3
!
IPX:
!
IPMS:
!
AAA:
aaaauthenticationdefault"local"
aaaauthenticationconsole"local"
!
PARTM:
!
AVLAN:
!
802.1x:
!
QOS:
!
Policymanager:
!
Sessionmanager:
sessionpromptdefault"6850-1->"
!
SNMP:
!
RIP:
iploadrip
ipripinterface"vlan100"
ipripinterface"vlan100"statusenable
ipripstatusenable
!
OSPF:
!
BFD-STD:
!
ISIS:
!
IPv6:
!
IPSec:
!
IPmulticast:
iproute-map"local2rip"sequence-number50actionpermit
ipredistlocalintoriproute-map"local2rip"statusenable
!
RIPng:
!
OSPF3:
!
BGP:
!
Healthmonitor:
!
Interface:
!
Udld:
!
Netsec:
!
LinkAggregate:
!
PortMapping:
!
VLANAGG:
!
802.1Q:
!
Spanningtree:
bridgemode1x1
!
Bridging:
!
Bridging:
!
Portmirroring:
!
UDPRelay:
!
Serverloadbalance:
!
Systemservice:
swlogconsolelevelinfo
!
SSH:
!
VRRP:
!
Web:
!
AMAP:
!
LLDP:
!
LanPower:
!
NTP:
ntpserver10.1.53.4minpoll4prefer
ntpbroadcast-clientenable
ntpbroadcast-delay4000
ntpclientenable
!
RDP:
!
VLANSTACKING:
!
Ethernet-OAM:
!
EFM-OAM:
!
ERP:
!
SAA:
!
DHCPServer:
6850-2:
6850-2->showconfigurationsnapshotall
!
StackManager:
!
Chassis:
systemnamevxTarget
!
Configuration:
!
VLAN:
vlan1enablename"VLAN1"
vlan6enablename"VLAN6"
vlan6portdefault1/2
vlan100enablename"VLAN100"
vlan100portdefault1/1
!
VLANSL:
!
IP:
ipserviceall
ipinterfacedhcp-clientvlan1ifindex1
ipinterface"vlan6"address10.1.51.254mask255.255.255.0vlan6ifindex2
ipinterface"vlan100"address172.16.1.2mask255.255.255.252vlan100ifindex3
ipinterface"Loopback0"address1.1.1.1
ipmanaged-interfaceLoopback0applicationntp
!
IPX:
!
IPMS:
!
AAA:
aaaauthenticationdefault"local"
aaaauthenticationconsole"local"
!
PARTM:
!
AVLAN:
!
802.1x:
!
QOS:
!
Policymanager:
!
Sessionmanager:
sessiontimeoutcli10000
sessionpromptdefault"6850-2->"
!
SNMP:
!
RIP:
iploadrip
ipripinterface"vlan100"
ipripinterface"vlan100"statusenable
ipripstatusenable
!
OSPF:
!
BFD-STD:
!
ISIS:
!
IPv6:
!
IPSec:
!
IPmulticast:
iproute-map"local2rip"sequence-number50actionpermit
ipredistlocalintoriproute-map"local2rip"statusenable
!
RIPng:
!
OSPF3:
!
BGP:
!
Healthmonitor:
!
Interface:
!
Udld:
!
Netsec:
!
LinkAggregate:
!
PortMapping:
!
VLANAGG:
!
802.1Q:
!
Spanningtree:
bridgemode1x1
!
Bridging:
!
Bridging:
!
Portmirroring:
!
UDPRelay:
!
Serverloadbalance:
!
Systemservice:
swlogconsolelevelinfo
!
SSH:
!
VRRP:
!
Web:
!
AMAP:
!
LLDP:
!
LanPower:
!
NTP:
ntpserver10.1.53.4minpoll4prefer
ntpbroadcast-clientenable
ntpbroadcast-delay4000
ntpclientenable
!
RDP:
!
VLANSTACKING:
!
Ethernet-OAM:
!
EFM-OAM:
!
ERP:
!
SAA:
!
DHCPServer:
dhcp-serverenable
升级会员 