Re: NTP authentication issue

From: Peter McCreesh (petermccreesh@gmail.com)
Date: Fri Nov 11 2005 - 14:07:48 GMT-3


Hi Dave,
i think you need the following on R5
ntp server 10.10.10.1 <http://10.10.10.1> key 1

..Pete

On 11/11/05, Schulz, Dave <DSchulz@dpsciences.com> wrote:
>
> I have NTP set up between two routers with the following configuration,
> using a md5 password of "cisco". R1 is the master. Everything
> synchronizes and is happy. However, I am purposely trying to break it,
> by changing the password at R1 to "wellfleet" (all the old guys <like
> me> will appreciate that). Unfortunately, R5 still synchronizes (and it
> shouldn't). Am I missing something? Here are the configs.....
>
> !
> hostname R1
> !
> interface Ethernet0
> ip address 192.168.150.100 <http://192.168.150.100>
255.255.255.0<http://255.255.255.0>
> !
> interface Serial0
> ip address 10.10.10.1 <http://10.10.10.1>
255.255.255.0<http://255.255.255.0>
> ip pim nbma-mode
> ip pim sparse-mode
> encapsulation frame-relay
> no ip mroute-cache
> no fair-queue
> frame-relay map ip 10.10.10.1 <http://10.10.10.1> 105
> frame-relay map ip 10.10.10.5 <http://10.10.10.5> 105 broadcast
> frame-relay map ip 10.10.10.6 <http://10.10.10.6> 106 broadcast
> no frame-relay inverse-arp
> !
> ntp authentication-key 1 md5 051C03032D4A420C1C11 7
> ntp trusted-key 1
> ntp master 3
> !
>
>
> !
> hostname R5
> !
> interface Serial0
> ip address 10.10.10.5 <http://10.10.10.5>
255.255.255.0<http://255.255.255.0>
> ip pim sparse-mode
> encapsulation frame-relay
> no fair-queue
> frame-relay map ip 10.10.10.1 <http://10.10.10.1> 501 broadcast
> frame-relay map ip 10.10.10.5 <http://10.10.10.5> 501
> frame-relay map ip 10.10.10.6 <http://10.10.10.6> 501
> no frame-relay inverse-arp
> !
> ntp authentication-key 1 md5 13061E010803 7
> ntp authenticate
> ntp trusted-key 1
> ntp clock-period 17179785
> ntp server 10.10.10.1 <http://10.10.10.1>
> !
>
> Dave Schulz,
> Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Dec 01 2005 - 09:12:06 GMT-3