Comment
Author: Admin | 2025-04-28
GuidelinesYou need to enable SNTP authentication innetworks that require time synchronization security to make sure SNTP clientsare synchronized only to authenticated NTP servers.To authenticate an NTP server, set an authenticationkey and specify it as a trusted key.Examples# Enable SNTP authentication. system-view[Sysname] sntp authentication enableRelated commandssntp authentication-keyidsntp reliable authentication-keyidsntp authentication-keyidUse sntp authentication-keyid to set an SNTP authentication key.Use undo sntp authentication-keyid to remove an SNTP authentication key. Syntaxsntp authentication-keyid keyid authentication-mode { hmac-sha-1 | hmac-sha-256 | hmac-sha-384 | hmac-sha-512 | md5 } { cipher | simple } string [ acl ipv4-acl-number | ipv6 acl ipv6-acl-number ] *undo sntp authentication-keyid keyidDefaultNo SNTP authentication key exists.ViewsSystem viewPredefined user rolesnetwork-adminParameterskeyid: Specifies an authenticationkey ID in the range of 1 to 4294967295.authentication-mode:Specifies an authentication algorithm.· hmac-sha-1: Specifies the HMAC-SHA-1algorithm. This parameter is not supported in FIPS mode.· hmac-sha-256: Specifies the HMAC-SHA-256algorithm.· hmac-sha-384: Specifies the HMAC-SHA-384algorithm.· hmac-sha-512: Specifies the HMAC-SHA-512algorithm.· md5: Specifies the MD5 algorithm. Thiskeyword is not supported in FIPS mode.cipher: Specifies an authenticationkey in encrypted form.simple: Specifies anauthentication key in plaintext form. For security purposes, the authenticationkey specified in plaintext form will be stored in encrypted form.string: Specifies acase-sensitive authentication key. Its plaintext form is a string of 1 to 32characters. Its encrypted form is a string of 1 to 73 characters.acl ipv4-acl-number: Specifies an IPv4 basic ACL by its number in the range of 2000 to2999. Only the devices permitted by the ACL can use the key ID forauthentication.ipv6 acl ipv6-acl-number:Specifies an IPv6 basic ACL by its number in the range of 2000
Add Comment