109
Specifying an NTP server for the device
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Specify an NTP server for the
device.
•
For IPv4:
sntp unicast-server
{
server-name
|
ip-address
}
[
vpn-instance
vpn-instance-name
]
[
authentication-keyid
keyid
|
source
interface-type
interface-number
|
version
number
] *
•
For IPv6:
sntp ipv6 unicast-server
{
server-name
|
ipv6-address
}
[
vpn-instance
vpn-instance-name
]
[
authentication-keyid
keyid
|
source
interface-type
interface-number
] *
By default, no NTP server is
specified for the device.
Repeat this step to specify multiple
NTP servers.
To use authentication, you must
specify the
authentication-keyid
keyid
option.
To use an NTP server as the time source, make sure its clock has been synchronized. If the stratum level
of the NTP server is greater than or equal to that of the client, the client does not synchronize with the NTP
server.
Configuring SNTP authentication
SNTP authentication makes sure an SNTP client is synchronized only to an authenticated trustworthy NTP
server.
Follow these guidelines when you configure SNTP authentication:
•
Enable authentication on both the NTP server and the SNTP client.
•
Configure the SNTP client with the same authentication key ID and key value as the NTP server, and
specify the key as a trusted key on both the NTP server and the SNTP client. For information about
configuring NTP authentication on an NTP server, see "
•
Associate the specified key with an NTP server on the SNTP client.
With authentication disabled, the SNTP client can synchronize with the NTP server regardless of whether
the NTP server is enabled with authentication.
To configure SNTP authentication on the SNTP client:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable SNTP authentication.
sntp authentication enable
By default, SNTP authentication is
disabled.