Purpose
Command or Action
Device>
enable
Enters global configuration mode.
configure terminal
Example:
Step 2
Device#
configure terminal
Enables NTP authentication.
[
no
]
ntp authenticate
Step 3
Example:
Use the
no
form of this command to disable NTP
authentication
Device(config)#
ntp authenticate
Defines the authentication keys.
[
no
]
ntp authentication-key number
{
md5
|
cmac-aes-128
|
hmac-sha1
|
hmac-sha2-256
}
value
Step 4
• Each key has a key number, a type, and a value.
Example:
• Keys can be one of the following types:
Device(config)#
ntp authentication-key 42 md5
•
md5
: Authentication using the MD5 algorithm.
aNiceKey
•
cmac-aes-128
: Authentication using Cipher-based
message authentication codes (CMAC) with the
AES-128 algorithm. The digest length is 128 bits
and the key length is 16 or 32 bytes.
•
hmac-sha1
: Authentication using Hash-based
Message Authentication Code (HMAC) using the
SHA1 hash function. The digest length is 128 bits
and the key length is 1 to 32 bytes.
•
hmac-sha2-256
: Authentication using HMAC
using the SHA2 hash function. The digest length
is 256 bits and the key length is 1 to 32 bytes
Use the
no
form of this command to remove authentication
key.
Defines the authentication keys.
[
no
]
ntp authentication-key number
{
md5
|
cmac-aes-128
|
hmac-sha1
|
hmac-sha2-256
}
value
Step 5
• Each key has a key number, a type, and a value.
Example:
• Keys can be one of the following types:
Device(config)#
ntp authentication-key 42 md5
•
md5
: Authentication using the MD5 algorithm.
aNiceKey
•
cmac-aes-128
: Authentication using Cipher-based
message authentication codes (CMAC) with the
AES-128 algorithm. The digest length is 128 bits
and the key length is 16 or 32 bytes.
System Management Configuration Guide, Cisco IOS XE Gibraltar 16.10.x (Catalyst 9200 Switches)
17
Administering the Device
Configuring NTP Authentication
