Configuring Ntp Authentication - H3C S7500 Series Operation Manual

Operation Manual – NTP
H3C S7500 Series Ethernet Switches
If the NTP authentication is not enabled on a client, the client can be synchronized
to a server regardless of the NTP authentication configuration performed on the
server (assuming that the related configurations are performed).
You need to couple the NTP authentication with a trusted key.
The configurations performed on the server and the client must be the same.
A client with NTP authentication enabled is only synchronized to a server that can
provide a trusted key.

1.4.2 Configuring NTP Authentication

I. Configuring NTP authentication on the client
Follow these steps to configure NTP authentication on the client:
To do...
Enter system view
Enable NTP
authentication
globally
Configure the NTP
authentication key
Configure the
specified key to be a
trusted key
Associate the
specified key with
the corresponding
NTP server
Use the command...
system-view
ntp-service
authentication enable
ntp-service
authentication-keyid
key-id
authentication-mode
md5 value
ntp-service reliable
authentication-keyid
key-id
NTP client mode:
ntp-service
unicast-server
{ remote-ip | server-name }
authentication-keyid
key-id
Peer mode:
ntp-service unicast-peer
{ remote-ip | peer-name }
authentication-keyid
key-id
1-9
Chapter 1 NTP Configuration
Remarks
—
Required
By default, the NTP
authentication is disabled
Required
By default, the NTP
authentication key is not
configured
Required
By default, no trusted
authentication key is
configured
In NTP client mode and
NTP peer mode, you need
to associate the specified
key with the corresponding
NTP server on the client.
You can associate the NTP
server with
authentication key
configuring the switch to
operate in a specific NTP
mode. You can
associate them using this
command after configuring
the NTP mode where the
switch is to operate
the
while
also