H3C Technologies H3C SR8800 - Manual (Page 76)

64
The above tasks are required. If any task is missed, the NTP authentication cannot function.
Configuring NTP authentication in client/server mode
When configuring NTP authentication in client/server mode, you need to configure the required tasks on
both the client and server, and associate the key with the NTP server on the client.
• If NTP authentication is not enabled or no key is associated with the NTP server on the client, no
NTP authentication is performed when the client synchronizes its clock to the server. No matter NTP
authentication is enabled on the server or not, the clock synchronization between the server and
client can be performed.
• If NTP authentication is enabled and a key is associated with the NTP server on the client, but the
key is a trusted key, no matter NTP authentication is enabled on the server or not, the client does not
synchronize its clock to the server.
Configuring NTP authentication for a client
To configure NTP authentication for a client:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable NTP authentication. ntp-service authentication enable Disabled by default
3. Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid authentication-mode md5
value
No NTP authentication key by
default
4. Configure the key as a trusted
key. ntp-service reliable
authentication-keyid keyid
No authentication key is
configured to be trusted by default
5. Associate the specified key
with an NTP server.
ntp-service unicast-server
{ ip-address | server-name }
authentication-keyid keyid
You can associate a non-existing
key with an NTP server. To enable
NTP authentication, you must
configure the key and specify it as
a trusted key after associating the
key with the NTP server.
NOTE:
After you enable the NTP authentication feature for the client, make sure that you configure for the client
an authentication key that is the same as on the server and specify that the authentication key is trusted.
Configuring NTP authentication for a server
To configure NTP authentication for a server:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable NTP authentication. ntp-service authentication enable Disabled by default