HP 6125XLG R2306-HP 6125XLG Blade Switch Network Management and Monitoring Con - Page 26

Enable NTP, as a trusted

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 26 highlights

Step Command Remarks 3. Configure an NTP authentication key. ntp-service authentication-keyid keyid authentication-mode md5 { cipher | simple } value By default, no NTP authentication key is configured. 4. Configure the key as a trusted ntp-service reliable key. authentication-keyid keyid By default, no authentication key is configured as a trusted key. 5. Associate the specified key with a passive peer. • Associate the specified key with a passive peer: ntp-service unicast-peer { ip-address | peer-name } [ vpn-instance vpn-instance-name ] authentication-keyid keyid • Associate the specified key with N/A a passive peer: ntp-service ipv6 unicast-peer { ipv6-address | peer-name } [ vpn-instance vpn-instance-name ] authentication-keyid keyid To configure NTP authentication for a passive peer: Step 1. Enter system view. Command system-view 2. Enable NTP authentication. ntp-service authentication enable 3. Configure an NTP authentication key. ntp-service authentication-keyid keyid authentication-mode md5 { cipher | simple } value 4. Configure the key as a trusted ntp-service reliable key. authentication-keyid keyid Remarks N/A By default, NTP authentication is disabled. By default, no NTP authentication key is configured. By default, no authentication key is configured as a trusted key. NTP authentication results differ when different configurations are performed on active peer and passive peer. For more information, see Table 3. (N/A in the table means that whether the configuration is performed does not make any difference.) Table 3 NTP authentication results Active peer Passive peer Enable NTP authentic ation Configure a key and configure it as a trusted key Associate the key with an passive peer Enable NTP authentication Stratum level of the active and passive peers is not considered. Yes Yes Yes Yes Configure a key and configure it as a trusted key Authentication result Succeeded. NTP Yes messages can be sent and received properly. 20

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
20
Step
Command
Remarks
3.
Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid
authentication-mode md5
{
cipher
|
simple
}
value
By default, no NTP authentication
key is configured.
4.
Configure the key as a trusted
key.
ntp-service reliable
authentication-keyid
keyid
By default, no authentication key is
configured as a trusted key.
5.
Associate the specified key
with a passive peer.
•
Associate the specified key with
a passive peer:
ntp-service unicast-peer
{
ip-address
|
peer-name
}
[
vpn-instance
vpn-instance-name
]
authentication-keyid
keyid
•
Associate the specified key with
a passive peer:
ntp-service ipv6 unicast-peer
{
ipv6-address
|
peer-name
}
[
vpn-instance
vpn-instance-name
]
authentication-keyid
keyid
N/A
To configure NTP authentication for a passive peer:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable NTP authentication.
ntp-service
authentication
enable
By default, NTP authentication is
disabled.
3.
Configure an NTP
authentication key.
ntp-service authentication-keyid
keyid
authentication-mode md5
{
cipher
|
simple
}
value
By default, no NTP authentication
key is configured.
4.
Configure the key as a trusted
key.
ntp-service reliable
authentication-keyid
keyid
By default, no authentication key is
configured as a trusted key.
NTP authentication results differ when different configurations are performed on active peer and passive
peer. For more information, see
Table 3
. (N/A in the table means that whether the configuration is
performed does not make any difference.)
Table 3
NTP authentication results
Active peer
Passive peer
Authentication result
Enable
NTP
authentic
ation
Configure a
key and
configure it
as a trusted
key
Associate the
key with an
passive peer
Enable NTP
authentication
Configure a
key and
configure it as
a trusted key
Stratum level of the active and passive peers is not considered.
Yes
Yes
Yes
Yes
Yes
Succeeded. NTP
messages can be sent
and received properly.