HPE FlexNetwork 10500 SERIES, Configuration Manual

Page: 100 / 407

89
Step Command Remarks
5. Associate the specified key
with a passive peer.
•
Associate the specified key
with a passive peer:
ntp-service unicast-peer
{ ip-address | peer-name }
[ vpn-instance
vpn-instance-name ]
authentication-keyid keyid
•
Associate the specified key
with a passive peer:
ntp-service ipv6
unicast-peer
{ ipv6-address
| peer-name } [ vpn-instance
vpn-instance-name ]
authentication-keyid keyid
N/A
To configure NTP authentication for a passive peer:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enable NTP authentication.
ntp-service authentication
enable
By default, NTP authentication is
disabled.
3. Configure an NTP
authentication key.
ntp-service
authentication-keyid keyid
authentication-mode
{ hmac-sha-1 | hmac-sha-256 |
hmac-sha-384 | hmac-sha-512 |
md5 } { cipher | simple } string
By default, no NTP authentication
key exists.
4. Configure the key as a
trusted key.
ntp-service reliable
authentication-keyid keyid By default, no authentication key
is configured as a trusted key.
NTP authentication results differ when different configurations are performed on active peer and
passive peer. For more information, see
Table 4 . (N/A in the table means that whether the
configuration is performed does not make any difference.)
Table 4 NTP authentication results
Active peer Passive peer
Authentication
result
Enable NTP
authenticatio
n
Configure
a key and
configure
it as a
trusted key Associat
e the key
with a
passive
peer
Enable NTP
authenticatio
n
Configure
a key and
configure
it as a
trusted
key
Stratum level of the active and passive peers is not considered.
Yes Yes Yes Yes Yes
Succeeded. NTP
messages can be
sent and received
correctly.
Yes Yes Yes Yes No
Failed. NTP
messages cannot be
sent and received
correctly.