From: Landon Fitts (l.fitts@xxxxxxxxxxxxxx)
Date: Mon Mar 25 2002 - 23:20:18 GMT-3
Shailen,
Try using the access-list on your router R6R07 rather than your router
R9R07.
Regards,
Landon Fitts
CCNP, CCDP, NNCSE, NNCDE
l.fitts@mindspring.com
----- Original Message -----
From: "Shailen Amichand" <Shailen.Amichand@xtra.co.nz>
To: <ccielab@groupstudy.com>
Sent: Monday, March 25, 2002 8:41 PM
Subject: NTP authentication and access-groups
> Hi Folks
>
>
> I need some help with this ntp config. I want to use authentication as
> well as access-list 30. As soon as I put the access-group command in (I
> have tried all the options server-only, peer, etc) the master clock gets
> unsynch. Thus no other router can sync to it. What I am I missing here??
>
> Thanks
> Shailen
>
> R9R07#
> access-list 30 permit 192.168.2.138
> access-list 30 permit 192.168.2.154
> ntp authentication-key 1 md5 070C285F4D06 7
> ntp authenticate
> ntp access-group serve 30
> ntp master 1
> ntp update-calendar
> End
>
> R9R07#sh ntp stat
> Clock is unsynchronized, stratum 16, no reference clock
> nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is
> 2**24
> reference time is C04A44D7.B68A29EA (12:52:39.713 NZDT Tue Mar 26 2002)
> clock offset is 0.0000 msec, root delay is 0.00 msec
> root dispersion is 1875.02 msec, peer dispersion is 1875.02 msec
> R9R07#
> ------------------------------------------------------------------------
> ----------------------------------------------------------
> R9R07(config)#no ntp access-group peer 30
> R9R07#
> .Mar 26 13:07:35: NTP: 127.127.7.1 reachable
> .Mar 26 13:07:35: NTP: synced to new peer 127.127.7.1
> Mar 26 13:07:35: NTP: sync change
> Mar 26 13:07:35: NTP: peer stratum changesh ntp stat
> Clock is synchronized, stratum 1, reference is .LOCL.
> nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is
> 2**24
> reference time is C04A4857.B6880FDB (13:07:35.713 NZDT Tue Mar 26 2002)
> clock offset is 0.0000 msec, root delay is 0.00 msec
> root dispersion is 15875.02 msec, peer dispersion is 15875.02 msec
> R9R07#
> ------------------------------------------------------------------------
> ----------------------------------------------------------
>
>
> R6R06#
> ntp authentication-key 1 md5 01100F175804 7
> ntp authenticate
> ntp trusted-key 1
> ntp server 192.168.2.153 key 1
> end
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:22 GMT-3