Ruijie RG-S2900G-E Series, Configuration Manual

Page: 867 / 943

Configuration Guide NTP Configuration
However, enabling the global security authentication does not mean that the
encryption is used to implement the communication between the NTP server
and the NTP client. You need to configure other keys globally and an encryption
key for the NTP server.
To configure the global security authentication mechanism, run the following
commands in the global configuration mode:
Command Function
ntp authenticate
Configure the global NTP security
authentication mechanism.
no ntp authenticate
Disable the global NTP security authentication
mechanism.
The message is verified by the trusted key specified by the ntp
authentication-key or ntp trusted-key command.
Configuring the Global NTP Authentication Key
The next step to configure the global security authentication for the NTP is to
set the global authentication key.
Each key is identified by a unique key-id globally. The customer can use the
command ntp trusted-key to set the key corresponding to the key-id as a
global trusted key.
To specify a global authentication key, run the following commands in the global
configuration mode:
Command Function
ntp authentication-key key-id md5
key-string [ enc-type ]
Specify a global authentication key.
key-id : in the range of 1 to 4294967295
key-string : Any
enc-type : Two types: 0 and 7
no ntp authentication-key key-id md5
key-string [ enc-type ]
Remove a global authentication key.
The configuration of global authentication key does not mean the key is
effective; therefore, the key must be configured as a global trusted key before
using it.
Caution
The current NTP version can support up to 1024 authentication
keys and only one key can be set for each server for secure
communication.