KB.15.15

If there are already three SNTP server addresses configured on the switch, and you want to use

the CLI to replace one of the existing addresses with a new one, you must delete the unwanted

address before you configure the new one.

About trusted keys

trusted

Trusted keys are used in SNTP authentication. In unicast mode, you must associate a key with a

specific NTP/SNTP server. That key is used for authenticating the SNTP packet.

In unicast mode, a specific server is configured on the switch so that the SNTP client communicates

with the specified server to get the date and time.

In broadcast mode, the SNTP client switch checks the size of the received packet to determine if

it is authenticated. If the broadcast packet is authenticated, the key-id value is checked to see if

the same key-id value is configured on the SNTP client switch. If the switch is configured with the

same key-id value, and the key-id value is configured as "trusted," the authentication succeeds.

Only trusted key-id value information is used for SNTP authentication.

If the packet contains key-id value information that is not configured on the SNTP client switch, or

if the received packet contains no authentication information, it is discarded. The SNTP client switch

expects packets to be authenticated if SNTP authentication is enabled.

When authentication succeeds, the time in the packet is used to update the time on the switch.

About saving configuration files and the include-credentials

command

You can use the include-credentials command to store security information in the

running-config file. This allows you to upload the file to a TFTP server and then later download the

file to the HP switches on which you want to use the same settings.

The authentication key values are shown in the output of the show running-config and show

config commands only if the include-credentials command was executed.

When SNTP authentication is configured and include-credentials has not been executed,

the SNTP authentication configuration is not saved.

Example 40 Configuration file with SNTP authentication information

HP Switch (config) # show config

Startup configuration:

timesync sntp

sntp broadcast

sntp 50

sntp authentication

sntp server priority 1 10.10.10.2.3 key-id 55

sntp server priority 2 fe80::200:24ff:fec8:4ca8 4 key-id 55

NOTE: SNTP authentication has been enabled and a key-id of 55 has been created.

In this example, the include-credentials command has not been executed and is not present

in the configuration file. The configuration file is subsequently saved to a TFTP server for later use.

The SNTP authentication information is not saved and is not present in the retrieved configuration

files, as shown in the following example.

68 Time Protocols