R211x-HP Flexfabric 11900 Network Management and Monitoring Command Reference

26
Usage guidelines
Enable NTP authentication in networks that require time synchronization security to make sure NTP clients
are only synchronized to authenticated NTP servers.
To authenticate an NTP server, set an authentication key and specify it as a trusted key.
Examples
# Enable NTP authentication.
<Sysname> system-view
[Sysname] ntp-service authentication enable
Related commands
• ntp-service authentication-keyid
• ntp-service reliable authentication-keyid
ntp-service authentication-keyid
Use ntp-service authentication-keyid to set an NTP authentication key.
Use undo ntp-service authentication-keyid to remove the NTP authentication key.
Syntax
ntp-service authentication-keyid keyid authentication-mode md5 { cipher | simple } value
undo ntp-service authentication-keyid keyed
Default
No NTP authentication key is set.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
keyid: Specifies a key ID to identify an authentication key, in the range of 1 to 4294967295.
authentication-mode md5 value: Uses the MD5 algorithm for key authentication.
simple: Sets a plaintext authentication key.
cipher: Sets a ciphertext authentication key.
value: Specifies the MD5 authentication key string. If simple is specified, it is a string of 1 to 32
characters. If cipher is specified, it is a string of 1 to 73 characters.
Usage guidelines
In a network where there is a high security demand, the NTP authentication feature must be enabled for
a system running NTP. This feature enhances the network security by using client-server key authentication,
which prohibits a client from synchronizing to a device that has failed the authentication.