21
To do… Use the command… Remarks
Enable NTP
authentication
ntp-service authentication enable
Required
Disabled by default
Configure an NTP
authentication key
ntp-service authentication-keyid keyid
authentication-mode md5 value
Required
No NTP authentication key by default
Configure the key as
a trusted key
ntp-service reliable authentication-keyid
keyid
Required
By default, no authentication key is
configured to be trusted.
Client/server mode:
ntp-service unicast-server { ip-address |
server-name } authentication-keyid keyid
Associate the
specified key with an
NTP server
Symmetric peers mode:
ntp-service unicast-peer { ip-address |
peer-name } authentication-keyid keyid
Required
You can associate a non-existing key with
an NTP server. To enable NTP
authentication, you must configure the key
and specify it as a trusted key after
associating the key with the NTP server.
NOTE:
After you enable the NTP authentication feature for the client, make sure that the authentication key you
configure for the client is the same as on the server, and specify that the authentication key is trusted.
Otherwise, the client cannot be synchronized to the server.
Configuring NTP authentication for a server
Follow these steps to configure NTP authentication for a server:
To do… Use the command… Remarks
Enter system view system-view —
Enable NTP
authentication
ntp-service authentication enable
Required
Disabled by default
Configure an NTP
authentication key
ntp-service authentication-keyid keyid
authentication-mode md5 value
Required
No NTP authentication key by default
Configure the key as
a trusted key
ntp-service reliable authentication-keyid
keyid
Required
By default, no authentication key is
configured to be trusted.
Enter VLAN interface
view
interface interface-type interface-number —
Broadcast server mode:
ntp-service broadcast-server
authentication-keyid keyid
Associate the
specified key with an
NTP server
Multicast server mode:
ntp-service multicast-server
authentication-keyid keyid
Required
You can associate a non-existing key with
an NTP server. To enable NTP
authentication, you must configure the key
and specify it as a trusted key after
associating the key with the NTP server.
NOTE:
The procedure for configuring NTP authentication on a server is the same as on a client. Aslo,
the same
authentication key must be configured on both the server and client.