ntp

authenticate

authentication-key {md5|sha1}

server {||} {[iburst|key] }

server-mode

source

standalone

trusted-key

Description

This command allows you to configure NTP options. Network Time Protocol (NTP) authentication enables thecontrollerto authenticate the NTP server before synchronizing local time with server. This helps identify secure servers from fradulent servers. This command has to be enabled for NTP authentication to work.

Starting from 8.1.0.0, you can specify the source address for NTP traffic originating from theMobility Conductorusing thesourceparameter. Before this enhancement, the NTP traffic’s source address was dynamically decided by theNTPmodule. The source of the NTP client traffic can be either a loopback interface or a specific VLAN ID. To allow time synchronization to be independent of any physical interfaces that could be down, use the loop back interface as the NTP source address.

Syntax

Parameter	Description
authenticate	This parameter enables thecontrollerto authenticate the NTP server before synchronizing local time with server. This helps identify secure servers from fraudulent servers. This command has to be enabled for NTP authentication to work.
authentication-key	This command configures a key identifier and secret key and adds them into the database. NTP authentication works with a symmetric key configured by user. The key is shared by the client (Arubamanaged device) and an external NTP server.
	The key identifier is a string that is shared by the client (Arubamanaged device) and an external NTP server. This value is added into the database.
md5\|sha1	The key value is a secret string, which along with the key identifier, is used for authentication. This is added into the database.
server	This command configures an NTP server. You can configure theMobility Conductorto set its system clock using NTP by specifying one or more NTP servers.
//	IPv4/IPv6/FQDN address of the peer.
iburst	(Optional) This parameter causes theMobility Conductorto send up to ten queries within the first minute to the NTP server. This option is considered “aggressive” by some public NTP servers. Default:disabled
key	This is the key identifier used to authenticate the NTP server. This needs to match the key identifier configured in the `ntp authentication-key`command.
server-mode [disable]	This command disables NTP server mode.
source	This command specifies the source address for NTP client traffic.
loopback	This parameter sets loopack interface as the source for NTP client traffic.
	This parameter sets source VLAN for NTP client traffic.
standalone	This command configures NTP time serve.
vlan-range	Configures VLAN interfaces on which NTP adheres for serving time where: > <词:表示VLAN范围。
trusted-key	This command configures an additional subset of trusted keys which can be used for NTP authentication.
	An additional trusted string that can be used for authentication.

Example

The following command configures an NTP server:

(host) [mynode] (config) #ntp authenticate

The following command configures the loopback interface as the source for NTP client traffic:

(host) [mynode] (config) #ntp source loopback

Command History

Release	Modification
ArubaOS8.8.0.0	The`fqdn`sub-parameter was added.
ArubaOS8.2.0.0	The`sha1`sub-parameter was added.
ArubaOS8.1.0.0	The following parameters were added: `server-mode` `source`
ArubaOS8.0.0.0	Command introduced.

Command Information

Platforms	地方政府投资公司ense	Command Mode
All platforms	Base operating system.	Config mode onMobility Conductor.