19
[ acl ipv4-acl-number | ipv6 acl
ipv6-acl-number ] *
4.
trusted key.
ntp-
authentication-keyid
keyid
By default, n
key is configured as a trusted
key.
5.
key with a passive peer.
• Associate the specified key with a
passive peer:
ntp-service unicast-peer
{ ip-address | peer-name }
[ vpn-instance
vpn-instance-name ]
authentication-keyid keyid
• Associate the specified key with a
passive peer:
ntp-service ipv6 unicast-peer
{ ipv6-address | peer-name }
[ vpn-instance
vpn-instance-name ]
keyid
N/A
To configure NTP authentication for a passive peer:
1. Enter system view.
N/A
2.
authentication.
ntp-service
authentication
enable
By default, NTP authentication is
disabled.
3.
authentication key.
• Release 1111:
ntp-service
authentication-keyid keyid
authentication-mode md5
{ cipher | simple } value
• Release 1121 and later:
ntp-service
authentication-keyid keyid
authentication-mode
{ hmac-sha-1 | hmac-sha-256 |
hmac-sha-384 | hmac-sha-512 |
md5 } { cipher | simple } string
[ acl ipv4-acl-number | ipv6 acl
ipv6-acl-number ] *
By default, no NTP authentication
key is configured.
4. Configure the key as a
trusted key.
ntp-
service reliable
authentication-keyid
keyid
By default, no authentication key
is configured as a trusted key.
NTP authentication results differ when different configurations are performed on active peer and
passive peer. For more information, see Table 3. (N/A in the table means that whether the
configuration is performed does not make any difference.)