Configuring Poll-Based Ntp Associations - Cisco Catalyst 9500 Manual

Configuring Poll-Based NTP Associations

Command or Action
Step 5 [no] ntp trusted-key key-number
Example:
Device(config)# ntp trusted-key 42
Step 6
[no] ntp server ip-address key key-id [prefer]
Example:
Device(config)# ntp server 172.16.22.44 key 42
Step 7 end
Example:
Device(config)# end
Configuring Poll-Based NTP Associations
To configure poll-based NTP associations, perform this procedure:
System Management Configuration Guide, Cisco IOS XE Fuji 16.8.x (Catalyst 9500 Switches)
16
Purpose
• cmac-aes-128: Authentication using Cipher-based
message authentication codes (CMAC) with the
AES-128 algorithm. The digest length is 128 bits
and the key length is 16 or 32 bytes.
• hmac-sha1: Authentication using Hash-based
Message Authentication Code (HMAC) using the
SHA1 hash function. The digest length is 128 bits
and the key length is 1 to 32 bytes.
• hmac-sha2-256: Authentication using HMAC
using the SHA2 hash function. The digest length
is 256 bits and the key length is 1 to 32 bytes
Use the no form of this command to remove authentication
key.
Defines trusted authentication keys that a peer NTP device
must provide in its NTP packets for this device to
synchronize to it.
Use the no form of this command to disable trusted
authentication.
Allows the software clock to be synchronized by an NTP
time server.
• ip-address: The IP address of the time server providing
the clock synchronization.
• key-id: Authentication key defined with the ntp
authentication-key command.
• prefer: Sets this peer as the preferred one that provides
synchronization. This keyword reduces clock hop
among peers.
Use the no form of this command to remove a server
association.
Returns to privileged EXEC mode.
Administering the Device