H3C Technologies H3C SR8800 - Manual (Page 78)

66
NOTE:
After you enable the NTP authentication feature for the active peer, make sure that you configure for the
active peer an authentication key that is the same as on the passive peer and specify that the
authentication key is trusted.
Configuring NTP authentication for a passive peer
To configure NTP authentication for a passive peer:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable NTP authentication. ntp-service authentication enable Disabled by default
3. Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid authentication-mode md5
value
No NTP authentication key is
configured by default.
4. Configure the key as a trusted
key. ntp-service reliable
authentication-keyid keyid No authentication key is
configured to be trusted by default
NOTE:
The same authentication key must be configured on both the active and passive peers.
Configuring NTP authentication in broadcast mode
When configuring NTP authentication in broadcast mode, configure the required tasks on both the
broadcast client and broadcast server, and associate the key with the broadcast server on the server.
• If NTP authentication is not enabled, no key is associated with the broadcast server, or the key is not
a trusted key, the clock of the broadcast server can be synchronized to the broadcast client as long
as NTP authentication is disabled on the client.
• If NTP authentication is enabled and a key is associated with the broadcast server, and the key is
a trusted key, the clock of the broadcast server can be synchronized to the broadcast client as long
as NTP authentication is enabled on the client.
Configuring NTP authentication for a broadcast client
To configure NTP authentication for a broadcast client:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable NTP authentication. ntp-service authentication enable Disabled by default
3. Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid authentication-mode md5
value
No NTP authentication key is
configured by default.
4. Configure the key as a trusted
key.
ntp-service reliable
authentication-keyid keyid No authentication key is
configured to be trusted by default.