Re: NTP

What about the key at the end of the ntp server command? Remember if the
task says you need to authenticate, your status must be authenticated not
just synchronized. It is very possible to configure partial authentication
and still be synchronized because authentication isn't fully configured.

Example:

R1#sho run | inc ntp
ntp authentication-key 1 md5 094F471A1A0A 7
ntp authenticate
ntp trusted-key 1
ntp server 192.168.11.2

R1#sho ntp associations de
192.168.11.2 configured, our_master, sane, valid, stratum 2
ref ID 127.127.7.1, time CE59C742.E46598E2 (07:56:50.892 UTC Tue Sep 15
2009)
our mode client, peer mode server, our poll intvl 64, peer poll intvl 64
root delay 0.00 msec, root disp 0.03, reach 377, sync dist 2.670
delay 5.20 msec, offset -1.3876 msec, dispersion 0.05
precision 2**18, version 3

Clock is synced but not authenticated!

Now....

R1(config)# ntp server 192.168.11.2 key 1

Wait awhile...

R1#sho ntp associations de
192.168.11.2 configured, authenticated, our_master, sane, valid, stratum 2
ref ID 127.127.7.1, time CE59C782.E463AC76 (07:57:54.892 UTC Tue Sep 15
2009)
our mode client, peer mode server, our poll intvl 64, peer poll intvl 64
root delay 0.00 msec, root disp 0.03, reach 377, sync dist 3.052
delay 5.26 msec, offset -1.7759 msec, dispersion 0.40
precision 2**18, version 3

Notice the first line says "authenticated"

On Tue, Sep 15, 2009 at 4:54 PM, hopalong <ccieangel_at_googlemail.com> wrote:

> Thanks Joe - master command missing :(
>
> ----- Original Message ----
> From: Joe Astorino <jastorino_at_ipexpert.com>
> To: hopalong <ccieangel_at_googlemail.com>; CCIE Groupstudy <
> ccielab_at_groupstudy.com>
> Sent: Tuesday, 15 September, 2009 23:47:04
> Subject: Re: NTP
>
> Also on the server where is your "ntp master" command?
> ------Original Message------
> From: hopalong
> Sender: nobody_at_groupstudy.com
> To: CCIE Groupstudy
> ReplyTo: hopalong
> Subject: NTP
> Sent: Sep 15, 2009 6:37 PM
>
> Hi
>
> Can anyone tell me why 54.1.1.6 refuses to be updated by .254 please?!!
>
>
> 54.1.1.254
> ntp authentication-key 5 md5 cisco
> ntp authenticate
> ntp trusted-key 5
>
>
> 54.1.1.6
> ntp authentication-key 5 md5 cisco
> ntp clock-period 17179932
> ntp server 54.1.1.254
>
>
> Aug 13 00:07:34.477: NTP: xmit packet to 54.1.1.254:
> .Aug 13 00:07:34.477: leap 3, mode 3, version 3, stratum 0, ppoll 64
> .Aug 13 00:07:34.477: rtdel 0000 (0.000), rtdsp 10001 (1000.015), refid
> 00000000 (0.0.0.0)
> .Aug 13 00:07:34.477: ref 00000000.00000000 (00:00:00.000 UTC Mon Jan 1
> 1900)
> .Aug 13 00:07:34.477: org BD4064F7.B0A1FAC7 (00:06:15.689 UTC Sun Aug 13
> 2000)
> .Aug 13 00:07:34.477: rec B0155986.80BF5B7F (00:06:30.502 UTC Fri Aug 13
> 1993)
> .Aug 13 00:07:34.477: xmt B01559C6.7A57FD6F (00:07:34.477 UTC Fri Aug 13
> 1993)
> .Aug 13 00:07:34.501: NTP: rcv packet from 54.1.1.254 to 54.1.1.6 on
> Serial0/0:
> Rack1R6#
> .Aug 13 00:07:34.501: leap 3, mode 4, version 3, stratum 0, ppoll 64
> .Aug 13 00:07:34.501: rtdel 0000 (0.000), rtdsp 10001 (1000.015), refid
> 00000000 (0.0.0.0)
> .Aug 13 00:07:34.501: ref 00000000.00000000 (00:00:00.000 UTC Mon Jan 1
> 1900)
> .Aug 13 00:07:34.501: org B01559C6.7A57FD6F (00:07:34.477 UTC Fri Aug 13
> 1993)
> .Aug 13 00:07:34.505: rec BD406537.B0C269DD (00:07:19.690 UTC Sun Aug 13
> 2000)
> .Aug 13 00:07:34.505: xmt BD406537.B0C5DB6D (00:07:19.690 UTC Sun Aug 13
> 2000)
> .Aug 13 00:07:34.505: inp B01559C6.80D9CA18 (00:07:34.503 UTC Fri Aug 13
> 1993)
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
>
> Regards,
>
> Joe Astorino - CCIE #24347 R&S
> Technical Instructor - IPexpert, Inc.
> Cell: +1.586.212.6107
> Fax: +1.810.454.0130
> Mailto: jastorino_at_ipexpert.com
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Bryan Bartik
CCIE #23707 (R&S), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com
Blogs and organic groups at http://www.ccie.net