14
ntp-service authentication-keyid
Use
ntp-service authentication-keyid
to set an NTP authentication key.
Use
undo ntp-service authentication-keyid
to remove an NTP authentication key.
Syntax
ntp-service
authentication-keyid
keyid
authentication-mode
{
hmac-sha-1
|
hmac-sha-256
|
hmac-sha-384
|
hmac-sha-512
|
md5
}
{
cipher
|
simple
}
string
[
acl
ipv4-acl-number
|
ipv6
acl ipv6-acl-number
]
*
undo ntp-service authentication-keyid
keyid
Default
No NTP authentication key exists.
Views
System view
Predefined user roles
network-admin
Parameters
keyid
: Specifies an authentication key ID in the range of 1 to 4294967295.
authentication-mode
: Specifies an authentication algorithm.
•
hmac-sha-1
: Specifies the HMAC-SHA-1 algorithm.
•
hmac-sha-256
: Specifies the HMAC-SHA-256 algorithm.
•
hmac-sha-384
: Specifies the HMAC-SHA-384 algorithm.
•
hmac-sha-512
: Specifies the HMAC-SHA-512 algorithm.
•
md5
: Specifies the MD5 algorithm.
cipher
: Specifies an authentication key in encrypted form.
simple
: Specifies an authentication key in plaintext form. For security purposes, the authentication
key specified in plaintext form will be stored in encrypted form.
string
: Specifies a case-sensitive authentication key. Its plaintext form is a string of 1 to 32
characters. Its encrypted form is a string of 1 to 73 characters.
acl
ipv4-acl-number
: Specifies an IPv4 basic ACL by its number in the range of 2000 to 2999.
Only the devices permitted by the ACL can use the key ID for authentication.
ipv6
acl
ipv6-acl-number
: Specifies an IPv6 basic ACL by its number in the range of 2000 to
2999. Only the devices permitted by the ACL can use the key ID for authentication.
Usage guidelines
In a network where there is a high security demand, the NTP authentication feature must be enabled
for a system running NTP. This feature enhances the network security by using client-server key
authentication, which prohibits a client from synchronizing to a device that has failed the
authentication.
The key ID in the message from the peer device identifies the key used for authentication. The
acl
ipv4-acl-number
or
acl
ipv6-acl-number
option is used to identify the peer device that can
use the key ID.
•
The device uses the
acl
ipv4-acl-number
or
acl
ipv6-acl-number
option to identify
whether the peer device can use the key ID only when an NTP session to the peer device is to
be established or has already existed.
Содержание SOHO IE4300
Страница 114: ...ii tftp client ipv6 source 41 tftp client source 41 tftp ipv6 42 tftp server acl 44 tftp server ipv6 acl 44...
Страница 285: ...i Contents Tcl commands 1 cli 1 tclquit 1 tclsh 2...
Страница 288: ...i Contents Python commands 1 exit 1 python 1 python filename 2...
Страница 291: ...i Contents Automatic configuration commands 1 autodeploy udisk enable 1...
Страница 323: ...25 Sysname Ten GigabitEthernet1 0 51 undo shutdown Related commands irf port...
Страница 396: ...i Contents Bulk interface configuration commands 1 display interface range 1 interface range 1 interface range name 3...
Страница 460: ...i Contents Port isolation commands 1 display port isolate group 1 port isolate enable 2 port isolate group 2...
Страница 465: ...ii stp vlan enable 55 vlan mapping modulo 55...
Страница 589: ...60 Examples Enable LLDP for automatic IP phone discovery Sysname system view Sysname voice vlan track lldp...
Страница 602: ...12 Related commands display mvrp statistics...
Страница 609: ...i Contents VLAN mapping commands 1 display vlan mapping 1 vlan mapping 2...
Страница 678: ...9 Related commands reset pppoe relay statistics...
Страница 846: ...i Contents Basic IP forwarding commands 1 display fib 1 ip forwarding table save 2...
Страница 1073: ...i Contents HTTP redirect commands 1 http redirect https port 1 http redirect ssl server policy 1...
Страница 1087: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1340: ...9 Sysname ipv6 route static default preference 120 Related commands display ipv6 routing table protocol...
Страница 1649: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1668: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1770: ...i Contents Time range commands 1 display time range 1 time range 1...
Страница 2026: ...34 Related commands display mac authentication...
Страница 2028: ...ii...
Страница 2143: ...i Contents User profile commands 1 display user profile 1 user profile 2...
Страница 2308: ...61 ipsec transform set...
Страница 2473: ...i Contents TCP attack prevention commands 1 tcp anti naptha enable 1 tcp check state interval 1 tcp state 2...
Страница 2531: ...i Contents SAVI commands 1 ipv6 savi down delay 1 ipv6 savi log enable 1 ipv6 savi strict 2...
Страница 2534: ...3 Sysname ipv6 savi strict Related commands ipv6 verify source...
Страница 2541: ...i Contents Crypto engine commands 1 display crypto engine 1 display crypto engine statistics 1 reset crypto engine statistics 3...
Страница 2545: ...i Contents FIPS commands 1 display crypto version 1 display fips status 1 fips mode enable 2 fips self test 4...
Страница 2791: ...14 Sysname track 1 Related commands delay display track...
Страница 2939: ...9 sntp authentication keyid sntp reliable authentication keyid...
Страница 2967: ...27 Related commands apply poe profile poe enable poe max power interface view poe priority...
Страница 3240: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 3263: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...