From: Lab Rat #109385382 (techlist01@gmail.com)
Date: Wed Nov 22 2006 - 07:32:33 ART
Hi Petr, I already moved past the question, but if if/when I lab it up
again, I will be sure to check it. In the scenario, I did create the
authentication statements AFTER the basic NTP was in place, so I may not
have waited long enough for it to break.
In any case, Im sure we can all agree that it would probably be more
right to configure the key argument on the server/peer statement.
I was just interested in knowing if it was a valid config or notthanks.
From: petrsoft@gmail.com [mailto:petrsoft@gmail.com] On Behalf Of Petr
Lapukhov
Sent: Wednesday, November 22, 2006 1:40 AM
To: Lab Rat #109385382
Cc: Cisco certification; security@groupstudy.com
Subject: Re: NTP Question
Please, show your exact configurations on server/client, as well as
"show ntp assoc detail" output
2006/11/22, Lab Rat #109385382 <techlist01@gmail.com>:
Petr.not sure about that. I've labbed up both ways and they both work (with
only one key configured). Maybe I didn't wait long enough, but NTP was
sync'd in both scenarios.
From: petrsoft@gmail.com [mailto:petrsoft@gmail.com] On Behalf Of Petr
Lapukhov
Sent: Wednesday, November 22, 2006 12:56 AM
To: Lab Rat #109385382
Cc: Cisco certification; security@groupstudy.com
Subject: Re: NTP Question
You definitely need "ntp server x.x.x.x key y" in order to let your router
know,
what key to use when polling the NTP server. This is because you may have
many keys configured on the same router, and use different keys for
different
servers.
2006/11/22, Lab Rat #109385382 <techlist01@gmail.com>:
I have seen two different configurations by a from leading training vendors.
If you have the following commands set:
ntp authenticate
ntp authentication-key 1 md5 PASSWORD
ntp trusted-key 1
do you need the following command:
ntp server x.x.x.x key 1
I have seen the solution stated as such:
ntp server x.x.x.x
Thanks,
Ed
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:48 ART