H3C S7500 Series Operation Manual page 808

Operation Manual – NTP
H3C S7500 Series Ethernet Switches
Note:
NTP authentication requires that the authentication keys configured for the server
and the client are the same. Besides, the authentication keys must be trusted keys.
Otherwise, the client cannot be synchronized with the server.
In NTP server mode and NTP peer mode, you need to associate the specified key
with the corresponding NTP server/active peer on the client/passive peer. In these
two modes, multiple servers/active peers may be configured for a client/passive
peer, and a client/passive peer chooses the server/active peer to synchronize to by
the authentication key.
II. Configuring NTP authentication on the server
Follow these steps to configure NTP authentication on the server:
To do...
Enter system view
Enable NTP
authentication
Configure NTP
authentication key
Configure the
specified key to be a
trusted key
Enter VLAN
interface view
Associate a
specified key with
the corresponding
NTP server
Use the command...
system-view
ntp-service
authentication enable
ntp-service
authentication-keyid
key-id
authentication-mode
md5 value
ntp-service reliable
authentication-keyid
key-id
interface interface-type
interface-number
Broadcast server mode:
ntp-service
broadcast-server
authentication-keyid
key-id
Multicast server mode:
ntp-service
multicast-server
authentication-keyid
key-id
1-10
Chapter 1 NTP Configuration
Remarks
—
Required
By default, NTP authentication is
disabled
Required
By default, NTP authentication
key is not configured
Required
By default, an authentication key
is not a trusted key
—
In NTP broadcast server mode
and NTP multicast server
mode, you need to associate
the specified key with the
corresponding NTP server on
the server
You can associate an NTP
server with an authentication
key while configuring a switch
to operate in a specific NTP
mode. You can also associate
them using this command
after configuring the NTP
mode where a switch is to
operate