16
•
Configure an authentication key.
•
Set the key as a trusted key on both client and server.
•
Associate the key with the NTP server on the client.
The key IDs and key values configured on the server and client must be the same. Otherwise, NTP
authentication fails.
To configure NTP authentication for a client:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable NTP authentication.
ntp-service authentication
enable
By default, NTP authentication is
disabled.
3.
Configure an NTP
authentication key.
ntp-service
authentication-keyid
keyid
authentication-mode md5
{
cipher
|
simple
}
value
By default, no NTP authentication
key is configured.
4.
Configure the key as a
trusted key.
ntp-service reliable
authentication-keyid keyid
By default, no authentication key
is configured as a trusted key.
5.
Associate the specified key
with an NTP server.
•
Associate the specified key
with an NTP server:
ntp-service
unicast-server
{
server-name
|
ip-address
}
authentication-keyid
keyid
•
Associate the specified key
with an IPv6 NTP server:
ntp-service
ipv6
unicast-server
{
server-name
|
ipv6-address
}
authentication-keyid
keyid
N/A
To configure NTP authentication for a server:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable NTP authentication.
ntp-service
authentication
enable
By default, NTP authentication is
disabled.
3.
Configure an NTP
authentication key.
ntp-service
authentication-keyid
keyid
authentication-mode md5
{
cipher
|
simple
}
value
By default, no NTP authentication
key is configured.
4.
Configure the key as a
trusted key.
ntp-service reliable
authentication-keyid keyid
By default, no authentication key
is configured as a trusted key.
NTP authentication results differ when different configurations are performed on client and server.
For more information, see
. (N/A in the table means that whether the configuration is
performed does not make any difference.)
