Configuring Ntp Authentication - Cisco Nexus 3548 series Configuration Manual

Configuring NTP Authentication

switch# config t
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# ntp server 192.0.2.10 key 10 use-vrf Red
switch(config)# ntp peer 2001:0db8::4101 prefer use-vrf Red
switch(config)# show ntp peers
--------------------------------------------------
Peer IP Address Serv/Peer
--------------------------------------------------
2001:0db8::4101 Peer (configured)
192.0.2.10 Server (configured)
switch(config)# copy running-config startup-config
[########################################] 100%
switch(config)#
Configuring NTP Authentication
You can configure the device to authenticate the time sources to which the local clock is synchronized. When
you enable NTP authentication, the device synchronizes to a time source only if the source carries one of the
authentication keys specified by the ntp trusted-key command. The device drops any packets that fail the
authentication check and prevents them from updating the local clock. NTP authentication is disabled by
default.
Before you begin
Make sure that you configured the NTP server with the authentication keys that you plan to specify in this
procedure.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
26
Command or Action
switch# configure terminal
switch(config)# [no] ntp authentication-key
number md5 md5-string
(Optional) switch(config)# show ntp
authentication-keys
switch(config)# [no]ntp trusted-key number
(Optional) switch(config)# show ntp
trusted-keys
Purpose
Enters global configuration mode.
Defines the authentication keys. The device
does not synchronize to a time source unless
the source has one of these authentication keys
and the key number is specified by the ntp
trusted-key number command.
Displays the configured NTP authentication
keys.
Specifies one or more keys that a time source
must provide in its NTP packets in order for the
device to synchronize to it. The range for trusted
keys is from 1 to 65535.
This command provides protection against
accidentally synchronizing the device to a time
source that is not trusted.
Displays the configured NTP trusted keys.
Configuring NTP