Cisco ASR 14000 Series Management Command Reference page 456

trusted-key
C i s c o C o n f i d e n t i a l - B e t a R e v i e w R 3 . 7. 1
trusted-key
To designate a Network Time Protocol (NTP) trusted key, use the trusted-key command in NTP
configuration mode. To remove the trusted-key command from the configuration file and restore the
system to its default condition with respect to this command, use the no form of this command.
Syntax Description
key-number
Defaults No NTP trusted key is designated.
Command Modes NTP configuration
Command History Release
Release 3.7.1
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs.
If authentication is enabled, use the trusted-key command to define one or more key numbers
(corresponding to the keys defined with the authentication-key [NTP] command) that a NTP system
must provide in its NTP packets for this system to synchronize to it. Because the other system must know
the correct authentication key, this precaution provides protection against accidentally synchronizing the
system to a system that is not trusted.
Task ID Task ID
ip-services
Examples The following example shows how to configure the system to synchronize only to systems providing
authentication key 42 in its NTP packets:
RP/0/RP0/CPU0:router(config)# ntp
RP/0/RP0/CPU0:router(config-ntp)# authenticate
RP/0/RP0/CPU0:router(config-ntp)# authentication-key 42 md5 clear key1
RP/0/RP0/CPU0:router(config-ntp)# trusted-key 42
Cisco ASR 14000 Series Router System Management Command Reference
SMR-454
trusted-key key-number
no trusted-key key-number
Authentication key number to be trusted. Range is from 1 to 65535.
Modification
This command was introduced on the Cisco ASR 14000 Series Router.
Operations
read, write
NTP Commands on Cisco IOS XR Software
OL-17231-01