Symmetricom 1100, 1000 manual Enabling NTP Authentication

Chapter 4 Provisioning the TimeProvider

Provisioning NTP Parameters

This command has a default access level of ADMIN.

<aid>	<keyword>	<value>	Description	Default value
NTP	FUNC	Add Delete	IP address to be added,	NA
		Modify	deleted, or modified
	SERVERIP	0.0.0.0	NTP Server IP address	1.0.0.1 to
				254.255.255.254
	KEYID	1 to 65534	Authentication ID	0
	MAXPOLL	16 32 64	Maximum amount of time in	1024
		128 256	seconds between server time
		512 1024	requests
	MINPOLL	16 32 64	Minimum amount of time in	16
		128 256	seconds between server time
		512 1024	requests
	PREFERRED	YES NO	NTP Preferred server	NO

Sample Command

ED-EQPT::NTP:TP1000::SERVER,ADD,192.168.10.1,1,64,1024,NO;

This command adds the server mask of 192.168.10.1, sets the Authentication ID to 1, the max poll to 64, the min poll to 1024, and the preferred to No.

Normal Response

TP-SSU 03-05-15 10-04-32 A 1166 REPT EVT

“NTP,EQPT:SERVER,TC,03-05-15 10-04-32,,,,:\NTP SERVER CONFIGURATION HAS CHANGED,192.168.10.1,0,16,1024,NO”

;

Enabling NTP Authentication

You use the ED-EQPT command to enable or disable MD5 authentication for NTP. When you enable authentication, the TimeProvider as the NTP server includes the authentication value in an encrypted portion of the time transmission (you use the KEYGEN keyword to set the authentication key). An NTP client that has the same authentication key value can then authenticate the identity of the NTP server.

Authentication is optional.

ED-EQPT:[<tid>]:NTP:[<ctag>]::AUTHEN=<value>;

This command has a default access level of ADMIN.

124 TimeProvider User’s Guide 097-58001-02 Revision G – April 2008