CISCO-logo

CISCO NX-OS Yepamberi Network Operating System Yakagadzirwa

CISCO-NX-OS-Advanced-Network-Operating-System-Yakagadzirwa-chigadzirwa

Zvigadzirwa Zvinotsanangurwa

  • Time Synchronization Protocol: NTP (Network Time Protocol)
  • Support: Cisco NX-OS
  • Features: NTP nguva server kumisikidzwa, NTP vezera hukama, kuchengetedza maficha, virtualization rutsigiro

Mirayiridzo Yekushandiswa Kwechigadzirwa

Kugadzirisa NTP yeKuyananisa Nguva
Usati wabatanidza mudziyo wako wetiweki nemaseva eNTP, funga zvinotevera zvinongedzo:

  1. NTP inofananidza nguva yakataurwa nemidziyo yakasiyana-siyana uye inodzivirira kuwiriranisa neyakasiyana zvakanyanya nguva masosi.
  2. Kana usingakwanise kubatanidza kune stratum 1 server, shandisa veruzhinji NTP maseva anowanikwa painternet kuti ayananise.
  3. Kana kuwanikwa kweinternet kuchirambidzwa, gadzirisa zvigadziriso zvenguva yemuno sekunge zvakawiriraniswa kuburikidza neNTP.

Kugadzira NTP Peer Relationships
Kusarudza mauto-anoshumira nguva yekuwiriranisa uye kuve nechokwadi chenguva chaiyo kana server yakundikana:

  • Gadzira hukama hwevezera hweNTP nevatambi vaunoda.
  • Shandisa rondedzero-yakavakirwa zvirambidzo kana encrypted echokwadi nzira dzekuwedzera chengetedzo.

Kugovera NTP Configuration Uchishandisa CFS
Cisco Fabric Services (CFS) inobvumira kugovera magadzirirwo emunharaunda eNTP panetiweki. Tevera matanho aya:

  1. Gonesa CFS pamudziyo wako kuti utange network-wide lock paNTP kumisikidza.
  2. Mushure mekuchinja kwegadziriro, zvirase kana kuti zvipire kusunungura kiyi yeCFS.

Kuwanikwa Kwepamusoro uye Virtualization Tsigiro
Ita shuwa kuwanikwa kwepamusoro uye kutsigirwa kwe virtualization kweNTP ne:

  • Kugadzirisa NTP vezera redundancy kana server yakundikana.
  • Kuziva chaiyo yekufambisa uye kutumira (VRF) zviitiko zveNTP kushanda.

FAQ

  • Zvinodiwa uye Nhungamiro Yekugadzirisa NTP
    • Zvinodiwa: Ita shuwa yekubatanidza network uye kuwana kune inodiwa NTP maseva.
    • Nhungamiro: Shandisa maficha ekuchengetedza senge manyorerwo uye echokwadi yekuyananisa nguva yakachengeteka.
  • Default NTP Settings
    • NTP Inogoneswa kune ese mainterface nekusarudzika.
    • NTP passive Inogoneswa kuumba masangano.
    • NTP yechokwadi Yakavharwa nekusingaperi.
    • NTP yekuwana Inogoneswa nezvose zvinosangana.
    • NTP kutepfenyura server Yakadzimwa sesetting yenguva dzose.

Ruzivo NezveNTP

  • Iyo Network Time Protocol (NTP) inowiriranisa nguva yezuva pakati peseti yemaseva enguva yakagoverwa uye vatengi kuitira kuti iwe ugone kuwiriranisa zviitiko kana iwe uchigamuchira matanda ehurongwa uye zvimwe zviitiko zvakanangana nenguva kubva kune akawanda network zvishandiso. NTP inoshandisa Mushandisi Datagram Protocol (UDP) seprotocol yayo yekufambisa. Yese NTP yekutaurirana inoshandisa Coordinated Universal Time (UTC).
  • Sevha yeNTP inowanzogashira nguva yayo kubva kune inotenderwa nguva sosi, sewachi yeredhiyo kana wachi yeatomu yakasungirirwa pane sevha yenguva, yobva yagovera nguva ino panetiweki. NTP inoshanda zvakanyanya; hapana inopfuura pakiti imwe paminiti inodiwa kuwiriranisa michina miviri mukati me millisecond yeumwe neumwe.
  • NTP inoshandisa stratum kutsanangura chinhambwe pakati petiweki mudziyo uye ine mvumo nguva sosi:
    • Iyo stratum 1 nguva sevha yakanamirwa zvakananga kune inotenderwa nguva sosi (senge redhiyo kana atomic wachi kana GPS nguva sosi).
    • Iyo stratum 2 NTP server inogamuchira nguva yayo kuburikidza neNTP kubva kune stratum 1 nguva sevha.
  • Isati yawiriranisa, NTP inofananidza nguva yakashumwa nemidziyo yakawanda yetiweki uye haiwirirani neimwe yakasiyana zvakanyanya, kunyangwe iri stratum 1. Nekuti Cisco NX-OS haigone kubatana neredhiyo kana atomic wachi uye kuita senge stratum 1. Sevha, tinokurudzira kuti ushandise maseva eruzhinji eNTP anowanikwa paInternet. Kana network yakaparadzaniswa neInternet, Cisco NX-OS inokutendera kuti ugadzirise nguva sekunge yakawiriraniswa kuburikidza neNTP, kunyangwe yanga isiri.
    Cherechedza
    Iwe unogona kugadzira hukama hweNTP nevezera kuti usarudze iyo-inoshumira nguva iyo yaunoda kuti network yako kifaa ifunge kuwiriranisa uye kuchengetedza nguva chaiyo kana server yakundikana.
  • Nguva inochengetwa pachigadzirwa chinhu chakakosha, saka isu tinokurudzira zvakasimba kuti iwe ushandise chengetedzo maficha eNTP kudzivirira netsaona kana kwakashata marongero enguva isiriyo. Nzira mbiri dziripo: yekuwana rondedzero-yakavakirwa kudzora chirongwa uye yakavharidzirwa yechokwadi meshini.

NTP sevha yenguva

Mimwe michina inogona kuimisa sevhavha yenguva. Iwe unogona zvakare kugadzirisa chishandiso kuti chiite seane chiremera cheNTP server, ichichigonesa kugovera nguva kunyangwe isina kuwiriraniswa kune yekunze nguva sosi.

Kugovera NTP Kushandisa CFS

  • Cisco Fabric Services (CFS) inogovera iyo yemuno NTP kumisikidzwa kune ese maCisco madivayiri munetiweki.
  • Mushure mekugonesa CFS pamudziyo wako, network-wide lock inoiswa kuNTP pese panotangwa gadziriro yeNTP. Mushure mekuita shanduko yeNTP, unogona kuirasa kana kuita.
  • Chero zvazvingava, kiyi yeCFS inobva yasunungurwa kubva pakushandisa kweNTP.

Maneja wewachi

  • Mawachi zviwanikwa zvinoda kugovaniswa mukati memaitiro akasiyana.
  • Multiple time synchronization protocols, senge NTP uye Precision Time Protocol (PTP), inogona kunge ichimhanya muhurongwa.

Kuwanikwa Kwepamusoro

  • Stateless restarts inotsigirwa yeNTP. Mushure mekutangazve kana mutariri switchover, iyo inomhanya gadziriso inoshandiswa.
  • Unogona kugadzirisa NTP vezera kuti vape redundancy kana sevha yeNTP ikatadza.

Virtualization Tsigiro

NTP inocherekedza chaiyo yekufambisa uye kutumira (VRF) zviitiko. NTP inoshandisa iyo default VRF kana ukasagadzirisa chaiyo VRF yeNTP server uye NTP peer.

Zvinodiwa zveNTP

NTP ine zvinotevera zvinodikanwa:
Kugadzirisa NTP, unofanirwa kuve nekubatana kune imwechete sevha iri kuita NTP.

Nhungamiro uye Miganhu yeNTP

NTP ine zvinotevera zvigadziriso nhungamiro uye zvinogumira:

  • Iyo show ntp chikamu chimiro CLI kuraira hairatidze yekupedzisira chiitiko nguva stamp, chiitiko chekupedzisira, chiitiko chekupedzisira, uye chikonzero chekutadza kwekupedzisira.
  • NTP server mashandiro anotsigirwa.
  • Iwe unofanirwa kuve nekushamwaridzana nevezera nemumwe mudziyo chete kana uine chokwadi chekuti wachi yako yakavimbika (zvinoreva kuti uri mutengi weNTP server yakavimbika).
  • Vezera rakagadzirirwa roga rinotora basa revhavha uye rinofanira kushandiswa sekuchengetedza. Kana iwe uine maseva maviri, unogona kugadzirisa akati wandei kuti anongedze kune imwe sevha uye yakasara michina inongedza kune imwe sevha. Iwe unogona ipapo kugadzirisa kushamwaridzana kwevezera pakati pemasevha maviri aya kuti ugadzire yakavimbika NTP kumisikidzwa.
  • Kana iwe uine sevha imwe chete, iwe unofanirwa kugadzirisa ese maturusi sevatengi kune iyo server.
  • Iwe unogona kugadzirisa kusvika ku64 NTP masangano (maseva uye vezera).
  • Kana CFS yakadzimwa kuNTP, NTP haigoveri chero zvigadziriso uye haigamuchire kugoverwa kubva kune mamwe madivayiri munetiweki.
  • Mushure mekunge kugoverwa kweCFS kwagoneswa kuNTP, kupinda kweNTP configuration command inokiya network yeNTP kumisikidza kusvika murairo wekuita wapinda. Munguva yekukiyiwa, hapana shanduko inogona kuitwa kune iyo NTP kumisikidzwa nechero imwe mudziyo munetiweki kunze kwemudziyo watanga kukiya.
  • Kana ukashandisa CFS kugovera NTP, zvishandiso zvese zviri munetwork zvinofanirwa kunge zvine maVRF akafanana akarongwa sezvaunoshandisa paNTP.
  • Kana iwe ukagadzirisa NTP muVRF, ita shuwa kuti sevha yeNTP nevezera vanogona kusvika kune mumwe nemumwe kuburikidza nemaVRF akagadziriswa.
  • Iwe unofanirwa kugovera nemaoko makiyi eNTP echokwadi paNTP server uye Cisco NX-OS zvishandiso panetiweki.
  • Kana iwe uri kushandisa chinja semudziyo wekumucheto uye uchida kushandisa NTP, Cisco inokurudzira kushandisa iyo ntp yekuwana-boka rekuraira uye kusefa NTP chete kune inodiwa kumucheto zvishandiso.
  • Kana iyo sisitimu yakagadziridzwa ne ntp passive, ntp nhepfenyuro mutengi, kana ntp multicast mirairo yevatengi, kana NTP inogamuchira inouya symmetric inoshanda, kutepfenyura, kana multicast packet, inogona kuseta ephemeral peer association kuitira kuti iwirirane neanotumira. .
    Cherechedza
    Ita shuwa kuti unotsanangura ntp simbisa usati wagonesa chero yemirairo iri pamusoro. Kutadza kuita izvi kunobvumira mudziyo wako kuti uwirirane nechero mudziyo unotumira imwe yemhando dzepaketi dziri pamusoro, kusanganisira midziyo ine hutsinye inodzorwa neanorwisa.
  • Kana iyo ntp yechokwadi yekuraira yakatsanangurwa, kana symmetric inoshanda, kutepfenyura, kana multicast packet yagamuchirwa, sisitimu haiwirirani kune vezera kunze kwekunge packet inotakura imwe yemakiyi echokwadi anotsanangurwa mu ntp trusted-key global configuration command.
  • Kuti udzivise kuwiriranisa neasina kutenderwa network mauto, iyo ntp inotendesa murairo inofanirwa kutsanangurwa chero nguva iyo ntp passive, ntp nhepfenyuro mutengi, kana ntp multicast mutengi murairo wataurwa kunze kwekunge mamwe matanho, senge ntp yekuwana-boka rekuraira, yatorwa kudzivirira mauto asina mvumo kubva pakutaurirana nesevhisi yeNTP pamudziyo.
  • Iyo ntp inotendesa murairo haitendese kushamwaridzana kwevezera kwakagadziriswa kuburikidza ne ntp server uye ntp peer configuration mirairo. Kusimbisa iyo ntp server uye ntp peer kushamwaridzana, tsanangura kiyi kiyi.
  • Shandisa NTP kutepfenyura kana masangano akawanda kana kurongeka kwenguva uye kuvimbika zvinodiwa zvine mwero, network yako iri munharaunda, uye network ine vanopfuura makumi maviri vatengi. Isu tinokurudzira kuti ushandise NTP kutepfenyura kana multicast kushamwaridzana mumatiweki ane mashoma bandwidth, system memory, kana CPU zviwanikwa.
  • Anopfuura mana ACLs anogona configured kune rimwe chete NTP kuwana boka.
    Cherechedza Kurongeka kwenguva kunodzikiswa zvishoma muNTP nhepfenyuro masangano nekuti ruzivo rwunoyerera nenzira imwe chete.

Default Settings

Izvi zvinotevera zvigadziriso zveNTP paramita.

Parameters Default
NTP Inogoneswa kune ese ma interfaces
NTP passive (inogonesa NTP kuumba masangano) Yagoneswa
NTP chokwadi Yakaremara
NTP kuwana Yagoneswa
NTP yekuwana boka inofananidza zvese Yakaremara
NTP nhepfenyuro server Yakaremara
NTP multicast server Yakaremara
NTP multicast mutengi Yakaremara
NTP matanda Yakaremara

Kugadzirisa NTP

Kugonesa kana Kudzima NTP pane Interface
Unogona kugonesa kana kudzima NTP pane imwe interface. NTP inogoneswa pane ese mainterface nekusarudzika.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# interface mhando slot/port Inopinda interface yekugadzirisa mode.
Danho 3 chinja(config-kana)# [kwete] ntp disable {ip | ipv6} Inodzima NTP IPv4 kana IPv6 pane yakatarwa interface.

Shandisa iyo Aihwa fomu remurairo uyu kugonesazve NTP pane interface.

Danho 4 (Sarudzo) chinja(config-kana)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Anotevera example inoratidza maitiro ekugonesa kana kudzima NTP pane interface:

  • chinja# gadzirisa terminal
  • chinja(config)# interface ethernet 6/1
  • chinja (config-kana)# ntp disable ip
  • chinja (config-kana)# kopi inomhanya-config kutanga-config

Kugadzirisa Chishandiso seSevha Inotenderwa NTP
Iwe unogona kugadzirisa mudziyo kuti ushande seane chiremera cheNTP server, uchiigonesa kugovera nguva kunyangwe isina kuwiriraniswa kune iripo nguva sevha.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.

Example
Ex uyuample inoratidza magadzirirwo eCisco NX-OS mudziyo seane chiremera NTP server ine akasiyana stratum level:

  • chinja# gadzirisa terminal
  • Isa mirairo yekumisikidza, imwe pamutsara. Pedzisa neCNTL/Z.
  • chinja (config)# ntp tenzi 5

Kugadzirisa NTP Server uye Peer
Iwe unogona kugadzirisa sevha yeNTP uye peer.

Usati watanga
Ita shuwa kuti iwe unoziva iyo IP kero kana DNS mazita eNTP server yako nevamwe vayo.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# [Aihwa] ntp server {ip-kero | ipv6-kero | dns-zita} [key key-id] [maxpoll max-poll] [minpoll min-poll] [prefer] [shandisa-vrf vrf-zita] Inoumba mubatanidzwa nesevha.

Shandisa iyo key keyword kugadzirisa kiyi yekushandisa paunenge uchitaurirana neNTP server.

The range for the key-id nharo inobva pa1 kusvika pa65535.

Shandisa iyo maxpoll uye minpoll keywords kuti ugadzirise huwandu hwepamusoro uye hudiki hwenguva dzekuvhota sevha. The range for the max-poll uye min-poll nharo dzinobva pa4 kusvika

16 (yakagadzirirwa semasimba e2, saka zvinobudirira 16 kusvika 65536 masekondi), uye maitiro akasarudzika

vari 6 na4, zvichiteerana (maxpoll default = 64

masekonzi, minpoll default = masekonzi gumi nematanhatu).

Shandisa iyo sarudza keyword kuita iyi yakasarudzika NTP sevha yechishandiso.

Shandisa iyo shandisa-vrf keyword kugadzirisa iyo NTP server kuti itaure pamusoro peVRF yakataurwa.

The vrf-zita nharo inogona kunge yakamira, manejimendi, kana chero nyaya-inonzwa alphanumeric tambo inosvika makumi matatu nemaviri mavara.

Cherechedza                 Kana iwe ukagadzirisa kiyi kuti ishandiswe paunenge uchitaurirana neNTP server, ita shuwa kuti kiyi iripo sekiyi yakavimbika pamudziyo.

Danho 3 chinja(config)# [Aihwa] ntp peer {ip-kero | ipv6-kero | dns-zita} [key key-id] [maxpoll max-poll] [minpoll min-poll] [prefer] [shandisa-vrf vrf-zita] Anoumba kushamwaridzana nevezera rake. Iwe unogona kutsanangura kushamwaridzana kwevezera kwakawanda.

Shandisa iyo key keyword kugadzirisa kiyi yekushandisa paunenge uchitaurirana neveNTP vezera. The range for the key-id nharo inobva pa1 kusvika pa65535.

Shandisa iyo maxpoll uye minpoll keywords kuti ugadzirise huwandu hwepamusoro uye hudiki hwenguva dzekuvhota sevha. The range for the max-poll uye min-poll nharo dzinobva pa4 kusvika pa17 (yakagadzirirwa semasimba e2, saka zvinobudirira 16 kusvika 131072 seconds), uye maitiro ekutanga nde6 uye 4, zvichiteerana (maxpoll default = 64 masekondi, minpoll default = masekonzi gumi nematanhatu).

Shandisa iyo prefer keyword kuita iyi yakasarudzika NTP peer yechishandiso.

Shandisa iyo shandisa-vrf keyword kugadzirisa iyo NTP peer kuti itaure pamusoro peiyo yakatsanangurwa VRF. The vrf-zita nharo inogona kuva default , management , kana chero nyaya-inonzwa alphanumeric tambo inosvika makumi matatu nemaviri.

Danho 4 (Sarudzo) chinja(config)# ratidza ntp vezera Inoratidza sevha yakagadziriswa uye vezera.

Cherechedza                 Zita rezita rinogadziriswa chete kana iwe uine DNS server yakagadziriswa.

Danho 5 (Sarudzo) chinja(config)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Kugadzirisa NTP Kusimbisa
Iwe unogona kumisa chishandiso kuratidza nguva masosi ayo wachi yemuno inowiriraniswa. Paunogonesa NTP kuvimbiswa, mudziyo unowiriranisa kune imwe nguva sosi chete kana sosi yakatakura imwe yemakiyi echokwadi anotsanangurwa neiyo ntp yakavimbika-kiyi kuraira. Chishandiso chinodonhedza chero mapaketi anotadza cheki yechokwadi uye chinoadzivirira kubva kugadziridza wachi yemuno. Kuvimbiswa kweNTP kunovharwa nekusingaperi.

Usati watanga
Kusimbiswa kwemaseva eNTP uye vezera reNTP kunogadziriswa pa-per-association base uchishandisa kiyi kiyi pane yega yega ntp server uye ntp peer command. Ita shuwa kuti wakagadzirisa yese NTP server uye kushamwaridzana nevezera nemakiyi echokwadi aunoronga kutsanangura mune iyi maitiro. Chero ntp server kana ntp peercommands iyo isingatsanangure keyword icharamba ichishanda pasina humbowo.

Maitiro

Command or Chiito Chinangwa
Danho 1 gadzirisa terminal

Example:

chinja# gadzirisa terminal switch(config)#

Inopinda pasi rose configuration mode.
Danho 2 [Aihwa] ntp authentication-kiyi nhamba md5

md5-tambo

Example:

switch(config)# ntp yekusimbisa-kiyi

42 md5 aNiceKey

Inotsanangura makiyi echokwadi. Chishandiso hachiwirirane kune imwe nguva sosi kunze kwekunge sosi iine imwe yeaya makiyi ekusimbisa uye nhamba yakakosha inotsanangurwa ne ntp yakavimbika-kiyi nhamba command.

Mutsara wemakiyi echokwadi kubva 1 kusvika 65535. Kune MD5 tambo, unogona kuisa anosvika masere alphanumeric characters.

Danho 3 ntp server ip-kero key key-id

Example:

chinja(config)# ntp server 192.0.2.1 kiyi 1001

Inogonesa huchokwadi hweiyo NTP server yakatsanangurwa, ichigadzira kushamwaridzana nesevha.

Shandisa iyo key keyword kugadzirisa kiyi yekushandisa paunenge uchitaurirana neNTP server. The range for the key-id nharo inobva pa1 kusvika pa65535.

Kuti uwane chokwadi, iyo key keyword inofanira kushandiswa. Chero ntp server or ntp peer mirairo isingatsanangure iyo key keyword icharamba ichishanda pasina kuvimbiswa.

Danho 4 (Sarudzo) ratidza ntp authentication-kiyi

Example:

switch(config)# ratidza ntp authentication-kiyi

Inoratidza makiyi echokwadi eNTP akarongwa.
Danho 5 [Aihwa] ntp yakavimbika-kiyi nhamba

Example:

chinja (config)# ntp yakavimbika-kiyi 42

Inotsanangura kiyi imwe kana anopfuura (inotsanangurwa muChikamu 2) iyo isina kurongeka kure symmetric, kutepfenyura, uye multicast nguva sosi inofanira kupa mumapaketi ayo eNTP kuitira kuti mudziyo uwirirane kwairi. Mutsara wemakiyi akavimbika anobva pa1 kusvika pa65535.

Uyu murairo unopa dziviriro kubva kune netsaona kuyananidza mudziyo kune nguva sosi isingavimbike.

Danho 6 (Sarudzo) ratidza ntp akavimbika-kiyi

Example:

switch(config)# ratidza ntp akavimbika-makiyi

Inoratidza makiyi akatemerwa eNTP.
Danho 7 [Aihwa] ntp chokwadi

Example:

switch(config)# ntp simbisa

Inogonesa kana kudzima chokwadi che ntp passive, ntp kutepfenyura mutengi, uye ntp multicast. Kuvimbiswa kweNTP kunovharwa nekusingaperi.
Danho 8 (Sarudzo) ratidza ntp authentication-status

Example:

switch(config)# ratidza ntp authentication-status

Inoratidza chimiro cheNTP chechokwadi.
Danho 9 (Sarudzo) kopi kumhanya-config kutanga-config

Example:

switch(config)# kopi inomhanya-config kutanga-config

Inokopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Kugadzirisa NTP Kupinda Zvirambidzo

  • Iwe unogona kudzora kupinda kune masevhisi eNTP uchishandisa mapoka ekuwana. Kunyanya, iwe unogona kutsanangura marudzi ezvikumbiro izvo mudziyo unobvumira uye maseva kwainotambira mhinduro.
  • Kana iwe ukasagadzirisa chero mapoka ekuwana, kupinda kweNTP kunopihwa kune ese maturusi. Kana iwe ukagadzirisa chero mapoka ekuwana, kupinda kweNTP kunopihwa chete kumudziyo uri kure uyo wakabva IP kero inopfuura nzira yekuwana.
  • Kutanga neCisco NX-OS Release 7.0(3)I7(3), mapoka ekuwana anoongororwa nenzira inotevera:
    • Pasina iwo match-ese kiyi kiyi, iyo packet inoongororwa ichipesana nemapoka ekuwana (muhurongwa hwataurwa pazasi) kudzamara yawana mvumo. Kana mvumo isina kuwanikwa, pakiti inodonhedzwa.
    • Nemachisi-ese kiyi kiyi, iyo packet inoongororwa inopesana nemapoka ese ekuwana (muhurongwa hwataurwa pazasi) uye chiito chinotorwa zvichibva pakuongorora kwakabudirira kwekupedzisira (boka rekupedzisira rekuwana apo ACL inogadziriswa).
  • Mamepu eboka rekuwana kune mhando yepakiti ndeaya anotevera:
    • peer-gadzirisa mutengi, symmetric inoshanda, symmetric passive, shumira, kutonga, uye mapaketi akavanzika (ese marudzi)
    • service-gadzirisa mutengi, kutonga, uye mapaketi akavanzika
    • kushumira-chete-gadzirisa mapaketi evatengi chete
    • mubvunzo-chete- maitiro ekutonga uye mapaketi akavanzika chete
  • Mapoka ekuwana anoongororwa nenzira inotevera yekudzika:
    1. peer (ese mapaketi marudzi)
    2. shumira (mutengi, kutonga, uye mapaketi akavanzika)
    3. mubvunzo chete (mutengi mapaketi) kana mubvunzo-chete (kutonga uye mapaketi akavanzika)

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# [Aihwa] ntp kuwana-boka mechi-zvose | {{peer | service | kushumira-chete | mubvunzo-chete }access-list-zita} Inogadzira kana kubvisa boka rekupinda kudzora kupinda kweNTP uye inoshandisa yekutanga IP yekuwana runyorwa.

Sarudzo dzeboka rekuwana dzinoongororwa nenzira inotevera, kubva painoganhurira kusvika painoganhurira. Nekudaro, kana NTP ichienderana nemutemo wekuramba ACL mune yakagadziriswa vezera, ACL kugadzirisa inomira uye isingaenderere mberi kune rinotevera rekupinda boka sarudzo.

• The peer keyword inoita kuti mudziyo ugamuchire zvikumbiro zvenguva uye mibvunzo yekutonga yeNTP uye kuzviwiriranisa kumaseva anotsanangurwa mune yekuwana runyorwa.

• The service keyword inoita kuti mudziyo ugamuchire zvikumbiro zvenguva uye mibvunzo yekutonga yeNTP kubva kumaseva anotsanangurwa murunyorwa rwekuwana asi kwete kuwiriranisa pachayo kumaseva akatsanangurwa.

• The kushumira-chete keyword inoita kuti mudziyo ugamuchire zvikumbiro zvenguva chete kubva kumaseva anotsanangurwa mune yekuwana rondedzero.

• The mubvunzo-chete keyword inoita kuti mudziyo ugamuchire chete mibvunzo yekutonga yeNTP kubva kumaseva anotsanangurwa mune yekuwana rondedzero.

• The mechi-zvose keyword inogonesa sarudzo dzeboka rekupinda kuti dzitariswe mune inotevera kurongeka, kubva painoganhurirwa kusvika kune yakanyanya kurambidza: vezera, shumira, shumira-chete, mubvunzo-chete. Kana iyo inouya packet isingaenderane neiyo ACL mune vezera kuwana

boka, inoenda kuboka rekuwana server kune

kugadziriswa. Kana packet isingaenderane ACL ari kushumira kuwana boka, inoenda kushumira-chete kuwana boka, uye zvichingodaro.

Cherechedza                 The mechi-zvose keyword inowanikwa kutanga neCisco NX-OS Release 7.0(3)I6(1).

Danho 3 chinja(config)# ratidza ntp kupinda-mapoka (Sarudzo) Inoratidza iyo NTP yekupinda boka kumisikidzwa.
Danho 4 (Sarudzo) chinja(config)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Ex uyuample inoratidza magadzirirwo emudziyo kuti ubvumire kuwiriranisa kune vezera kubva kuboka rekuwana "accesslist1":

CISCO-NX-OS-Advanced-Network-Operating-System-Designed-fig-3

Kugadzirisa iyo NTP Source IP Kero
NTP inoseta kwainobva IP kero yemapaketi ese eNTP zvichienderana nekero yemushonga unotumirwa nawo mapaketi eNTP. Iwe unogona kugadzirisa NTP kuti ushandise chaiyo sosi IP kero.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 [Aihwa] ntp chitubu ip-kero Inogadzirisa kwakabva IP kero yemapaketi ese eNTP. The ip-kero inogona kunge iri IPv4 kana IPv6 fomati.

Example
Ex uyuample inoratidza magadzirirwo eNTP kwakabva IP kero ye192.0.2.2.

  • chinja# gadzirisa terminal
  • chinja(config)# ntp kunobva 192.0.2.2

Kugadzirisa iyo NTP Source Interface
Iwe unogona kugadzirisa NTP kushandisa chaiyo interface.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 [Aihwa] ntp source-interface interface Inogadzirisa iyo sosi yekushandisa kune ese NTP mapaketi. Rondedzero inotevera ine zvakakosha zve interface.

• ethernet

• loopback

• mgmt

• chiteshi-chiteshi

• vlan

Example
Ex uyuample inoratidza maitiro ekugadzirisa iyo NTP sosi interface:

  • chinja# gadzirisa terminal
  • switch(config)# ntp source-interface ethernet

Kugadzirisa NTP Broadcast Server
Iwe unogona kugadzirisa iyo NTP IPv4 nhepfenyuro server pane interface. Chishandiso chinobva chatumira mapaketi ekutepfenyura kuburikidza neiyo interface nguva nenguva. Mutengi haafanirwe kutumira mhinduro.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# interface mhando slot/port Inopinda interface yekugadzirisa mode.
Danho 3 chinja(config-kana)# [kwete] ntp kutepfenyura [destination ip-kero] [key key-id] [nhamba yeshanduro] Inogonesa NTP IPv4 kutepfenyura server pane yakatarwa interface.

•  destination ip-kero-Inogadzirisa iyo IP kero yekutepfenyura.

•  key key-id-Inogadzirisa nhamba yekiyi yekutepfenyura. Mutsara unobva pa1 kusvika pa65535.

•  nhamba yeshanduro-Inogadzirisa iyo NTP vhezheni. Nhamba yacho inobva pa2 kusvika ku4.

Danho 4 chinja(config-kana)# kubuda Inobuda muchimiro chekugadzirisa.
Danho 5 (Sarudzo) chinja(config)# [hapana] ntp kunonoka kutepfenyura delay Inogadzirisa kunonoka kutepfenyura rwendo rwekudzoka mumamicroseconds. Mutsara unobva 1 kusvika 999999.
Danho 6 (Sarudzo) chinja(config)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Ex uyuample inoratidza maitiro ekugadzirisa NTP nhepfenyuro server:

  • chinja# gadzirisa terminal
  • chinja(config)# interface ethernet 6/1
  • chinja(config-kana)# ntp kutepfenyura kwakuenda 192.0.2.10 chinja(config-kana)# kubuda
  • chinja (config)# ntp kutepfenyura kunonoka 100
  • switch(config)# kopi inomhanya-config kutanga-config

Kugadzirisa NTP Multicast Server
Unogona kugadzirisa NTP IPv4 kana IPv6 multicast server pane interface. Chishandiso chinobva chatumira mapaketi akawanda kuburikidza neiyo interface nguva nenguva.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# interface mhando slot/port Inopinda interface yekugadzirisa mode.
Danho 3 chinja(config-kana)# [no] ntp multicast [ipv4-kero | ipv6-kero] [key key-id] [ttl kukosha] [nhamba yeshanduro] Inogonesa NTP IPv4 kana IPv6 multicast server pane yakatarwa interface.

•  ipv4-kero or ipv6-kero- Multicast IPv4 kana IPv6 kero.

•  key key-id-Inogadzirisa kutepfenyura

nhamba yekiyi yekusimbisa. Mutsara unobva pa1 kusvika pa65535.

•  ttl kukosha-Nguva-yekurarama kukosha kwema multicast mapaketi. Mutsara unobva pa1 kusvika ku255.

•  shanduro nhamba-NTP shanduro. Nhamba yacho inobva pa2 kusvika ku4.

Danho 4 (Sarudzo) chinja(config-kana)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Ex uyuample inoratidza maitiro ekugadzirisa iyo Ethernet interface yekutumira NTP multicast mapaketi:

  • chinja# gadzirisa terminal
  • chinja(config)# interface ethernet 2/2
  • chinja (config-kana)# ntp multicast FF02::1:FF0E:8C6C
  • chinja (config-kana)# kopi inomhanya-config kutanga-config

Kugadzirisa NTP Multicast Client
Iwe unogona kugadzirisa mutengi weNTP multicast pane interface. Mudziyo wacho unobva wateerera mameseji eNTP akawanda uye worasa chero meseji inobva kune imwe interface iyo multicast isina kugadzirirwa.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# interface mhando slot/port Inopinda interface yekugadzirisa mode.
Danho 3 chinja(config-kana)# [kwete] ntp multicast mutengi [ipv4-kero | ipv6-kero] Inogonesa iyo yakataurwa kuti igamuchire NTP multicast mapaketi.
Danho 4 (Sarudzo) chinja(config-kana)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Ex uyuample inoratidza maitiro ekugadzirisa iyo Ethernet interface yekugamuchira NTP multicast mapaketi:

  • chinja# gadzirisa terminal
  • chinja(config)# interface ethernet 2/3
  • chinja (config-kana)# ntp multicast mutengi FF02::1:FF0E:8C6C
  • chinja (config-kana)# kopi inomhanya-config kutanga-config

Kugadzirisa NTP Logging
Iwe unogona kugadzirisa matanda eNTP kuitira kuti ugadzire matanda ehurongwa ane zviitiko zvakakosha zveNTP. NTP matanda inodzimwa nekusarudzika.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# [Aihwa] ntp kutema Inogonesa kana kudzima marogi ehurongwa kuti agadzirwe nezviitiko zvakakosha zveNTP. NTP matanda inodzimwa nekusarudzika.
Danho 3 (Sarudzo) chinja(config)# ratidza ntp logging-status Inoratidza mamiriro ekugadzirisa matanda eNTP.
Danho 4 (Sarudzo) chinja(config)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Anotevera example inoratidza maitiro ekugonesa matanda eNTP kuitira kugadzira matanda ehurongwa ane zviitiko zvakakosha zveNTP:

  • chinja# gadzirisa terminal
  • chinja (config)# ntp matanda
  • switch(config)# kopi inomhanya-config kutanga-config [############################################ ###] 100%
  • chinja(config)#

Kugonesa CFS Distribution yeNTP
Unogona kugonesa kugovera kweCFS yeNTP kuitira kuti ugovere gadziriro yeNTP kune mimwe michina inogoneswa neCFS.

Usati watanga
Iva nechokwadi chokuti wagonesa kugovera CFS nokuda kwomudziyo wacho.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# [Aihwa] ntp govera Inogonesa kana kudzima mudziyo kugamuchira zvigadziriso zveNTP izvo zvinoparadzirwa kuburikidza neCFS.
Danho 3 (Sarudzo) chinja(config)# ratidza ntp chimiro Inoratidza mamiriro ekugovera kweNTP CFS.
Danho 4 (Sarudzo) chinja(config)# kopi inomhanya-config kutanga-config Inochengetedza shanduko ichienderera kuburikidza nekutangazve uye inotangazve nekukopa iyo inomhanya gadziriso kune yekutanga kumisikidzwa.

Example
Ex uyuample inoratidza nzira yekugonesa mudziyo kugamuchira zvigadziriso zveNTP kuburikidza neCFS:

  • chinja# gadzirisa terminal
  • switch(config)# ntp govera
  • switch(config)# kopi inomhanya-config kutanga-config

Kuita NTP Configuration Shanduko
Kana iwe waita shanduko yeNTP yekumisikidza, iyo dhatabhesi inoshanda inonyorwa neshanduko yekumisikidza mune yakamirira dhatabhesi uye ese maturusi arimunetiweki anogashira zvakafanana.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# ntp kuita Inogovera shanduko yeNTP yekuchinja kune ese maCisco NX-OS madivayiri munetiweki uye anoburitsa kukiya kweCFS. Uyu murairo unodarika dhatabhesi inoshanda neshanduko dzakaitwa kune yakamirira dhatabhesi.

Kurasa NTP Configuration Shanduko
Mushure mekuita shanduko yezvigadziriso, unogona kusarudza kurasa shanduko pane kudziita. Kana iwe ukarasa shanduko, Cisco NX-OS inobvisa yakamirira shanduko yedhatabhesi uye inoburitsa kukiya kweCFS.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# ntp kubvisa Inorasa shanduko yeNTP mudura rakamirira uye inoburitsa kiyi yeCFS. Shandisa iyi rairo pachishandiso chawakatanga iyo NTP kumisikidzwa.

Kuburitsa CFS Session Lock
Kana iwe wakaita iyo NTP kumisikidza uye wakanganwa kuburitsa kukiya nekuita kana kurasa shanduko, iwe kana mumwe maneja anogona kuburitsa kukiya kubva kune chero mudziyo uri munetwork. Ichi chiito chinorasa zvakamirira shanduko yedatabase.

Maitiro

Command or Chiito Chinangwa
Danho 1 chinja# gadzirisa terminal Inopinda pasi rose configuration mode.
Danho 2 chinja(config)# clear ntp session Inorasa shanduko yeNTP mudura rakamirira uye inoburitsa kiyi yeCFS.

Kuongorora iyo NTP Configuration

Command Chinangwa
ratidza ntp kupinda-mapoka Inoratidza iyo NTP yekupinda boka kumisikidzwa.
ratidza ntp authentication-kiyi Inoratidza makiyi echokwadi eNTP akarongwa.
ratidza ntp authentication-status Inoratidza chimiro cheNTP chechokwadi.
ratidza ntp logging-status Inoratidza mamiriro ekutora matanda eNTP.
ratidza ntp peer-status Inoratidza chimiro kune ese NTP maseva uye vezera.
ratidza ntp peer Inoratidza vese veNTP vezera.
ratidza ntp yakamirira Inoratidza dhatabhesi yenguva pfupi yeCFS yeNTP.
ratidza ntp yakamirira-diff Inoratidza mutsauko pakati peiyo yakamirira CFS dhatabhesi uye yazvino NTP kumisikidzwa.
ratidza ntp rts-update Inoratidza iyo RTS yekuvandudza mamiriro.
ratidza mamiriro echikamu che ntp Inoratidza ruzivo rwechikamu chekugovera cheNTP CFS.
ratidza ntp source Inoratidza iyo yakagadziriswa NTP sosi IP kero.
ratidza ntp source-interface Inoratidza iyo yakagadziriswa NTP sosi interface.
ratidza ntp nhamba {io | local | ndangariro | peer

{ipaddr {ipv4-addr} | zita peer-zita}}

Inoratidza nhamba dzeNTP.
ratidza ntp chimiro Inoratidza mamiriro ekugovera kweNTP CFS.
ratidza ntp akavimbika-kiyi Inoratidza makiyi akatemerwa eNTP.
ratidza kumhanya-config ntp Inoratidza ruzivo rweNTP.

Kugadzirisa Exampzvimwe zveNTP

Kugadzirisa Exampzvimwe zveNTP

  • Ex uyuample inoratidza magadzirirwo eNTP server uye vezera, gonesa NTP kuvimbiswa, gonesa NTP matanda, uye wozochengeta iyo yekutanga kumisikidza kuitira kuti ichengetedzwe pane reboots uye kutangazve:CISCO-NX-OS-Advanced-Network-Operating-System-Designed-fig-1
  • Ex uyuample inoratidza NTP yekupinda boka kumisikidzwa nezvirambidzo zvinotevera:
    • Zvirambidzo zvevezera zvinoiswa kukero dzeIP dzinopfuura maitiro erunyorwa rwekuwana rwunonzi "peer-acl."
    • Sevha zvirambidzo zvinoiswa kune kero dzeIP dzinopfuura maitiro erunyorwa rwekuwana rwunonzi "serve-acl."
    • Sevha-chete zvirambidzo zvinoiswa kukero dzeIP dzinopfuura maitiro erunyorwa rwekuwana rwunonzi "serve-chete-acl."
    • Zvirambidzo zvemubvunzo-chete zvinoiswa kukero dzeIP dzinopfuura maitiro erunyorwa rwekuwana rwunonzi "mubvunzo-chete-acl."CISCO-NX-OS-Advanced-Network-Operating-System-Designed-fig-2

Zvinyorwa / Zvishandiso

CISCO NX-OS Yepamberi Network Operating System Yakagadzirwa [pdf] Bhuku reMushandisi
NX-OS Advanced Network Operating System Yakagadzirwa, NX-OS, Advanced Network Operating System Yakagadzirwa, Network Operating System Yakagadzirwa, Operating System Yakagadzirwa, System Yakagadzirwa, Yakagadzirwa.

References

Siya mhinduro

Yako email kero haizoburitswa. Nzvimbo dzinodiwa dzakamakwa *