23Default level3: Manage levelParameterskeyid: Authentication key ID, in the range of 1 to 4294967295.authentication-mode md5 value: Specifies the use of the MD5 algorithm for key authentication, wherevalue represents the authentication key and is a string of 1 to 32 characters.DescriptionUse the ntp-service authentication-keyid command to set the NTP authentication key.Use the undo ntp-service authentication-keyid command to remove the set NTP authentication key.By default, no NTP authentication key is set.In a network where there is a high security demand, the NTP authentication feature should be enabledfor a system running NTP. This feature enhances the network security by means of the client-server keyauthentication, which prohibits a client from synchronizing with a device that has failed authentication.When the NTP authentication key is configured, configure the key as a trusted key by using thentp-service reliable authentication-keyid command.CAUTION:• Presently the system supports only the MD5 algorithm for key authentication.• A maximum of 1,024 keys can be set for each device.• If an NTP authentication key is specified as a trusted key, the key automatically changes to untrustedafter you delete the key. In this case, you do not need to execute the undo ntp-service reliableauthentication-keyid command.Related commands: ntp-service reliable authentication-keyid.Examples# Set an MD5 authentication key, with the key ID of 10 and key value of BetterKey. system-view[Sysname] ntp-service authentication enable[Sysname] ntp-service authentication-keyid 10 authentication-mode md5 BetterKeyntp-service broadcast-clientSyntaxntp-service broadcast-clientundo ntp-service broadcast-clientViewLayer 3 Ethernet port view, VLAN interface viewDefault level3: Manage levelParametersNone
