KB.15.15

Associating a key with an SNTP server

Syntax

[no] sntp server priority 1-3 ip-address | ipv6-address

version-num [ key-id 1-4,294,967,295 ]

Configures a key-id to be associated with a specific server. The key itself must

already be configured on the switch.

The no version of the command disassociates the key from the server. This does

not remove the authentication key.

Default: No key is associated with any server by default.

priority Specifies the order in which the configured servers are polled

for getting the time.

version-num Specifies the SNTP software version to use and is assigned on

a per-server basis. The version setting is backwards-compatible.

For example, using version 3 means that the switch accepts

versions 1 through 3. Default: 3; range: 1 - 7.

key-id Optional command. The key identifier sent in the SNTP packet.

This key-id is associated with the SNTP server specified in the

command.

Example 27 Associating a key-id with a specific server

HP Switch(config)# sntp server priority 1 10.10.19.5 2 key-id 55

Configuring unicast and broadcast mode for authentication

IMPORTANT: To enable authentication, you must configure either unicast or broadcast mode.

After authentication is enabled, changing the mode from unicast to broadcast or vice versa is not

allowed; you must disable authentication and then change the mode.

To set the SNTP mode or change from one mode to the other, enter the appropriate command.

Syntax

sntp unicast

sntp broadcast

Enables SNTP for either broadcast or unicast mode.

Default:

Unicast Directs the switch to poll a specific server periodically for SNTP time

synchronization.

The default value between each polling request is 720 seconds, but can be

configured.

At least one manually configured server IP address is required.

NOTE: At least one key-id must be configured as trusted, and it must be

associated with one of the SNTP servers. To edit or remove the associated key-id

information or SNTP server information, SNTP authentication must be disabled.

Broadcast Directs the switch to acquire its time synchronization from data broadcast by any

SNTP server to the network broadcast address. The switch uses the first server

detected and ignores any others. However, if the Poll Interval (configurable up to

720 seconds) expires three times without the switch detecting a time update from

Associating a key with an SNTP server 55