cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3714
Views
0
Helpful
2
Replies

ntp authentication fails

loic.fouray
Level 1
Level 1

Hello,

I am a problem regarding NTP authentication on cisco IOS 12.1(13).

The ntp configuration is for me good :

ntp authentication-key <key_id> md5 <key>

ntp authenticate

ntp trusted-key <key_id>

ntp source Loopback0

ntp server <ip1> key <key_id> prefer

ntp server <ip2> key <key_id>

A part of Network equipments are synchronized.. No problem :

shor run | i ntp

ntp authentication-key <key_id> md5 <key_md5> 7

It-s good. The is translated in md5..

When we can a "debug ntp authentivation" :

*Mar 16 04:01:00.370 GMT+1:  Authentication key <key_id>

But, other equipments are unsynchronized :

shor run | i ntp

ntp authentication-key <key_id> md5 <key> 0

The number 0 was automatically added in the configuration..

When we can a "debug ntp authentivation" :

*Mar 16 04:01:00.370 GMT+1:  Authentication key  0

---

It is a bad interpretation of the key_id

On this equipments, if i configure :

ntp authentication-key <key_id> md5 <key>

The ntp is synchronized

Can you help me?

Thanks

Regards

Loi

2 Replies 2

Richard Burts
Hall of Fame
Hall of Fame

Loi

I am not clear whether you have a problem. You say that the first one works and that :"

On this equipments, if i configure :

ntp authentication-key md5

The ntp is synchronized"

So it sounds like you have it working.

The symptoms that you describe suggest that there was a configuration error in the first attempt to configure the key which you then fixed.

HTH

Rick

HTH

Rick

Hi,

Thanks Richard for your mail.

We  have the same configuration in two equipement

ntp authentication-key 6 md5 

and  in running configuration show the same line with à 0 like

ntp authentication-key 6 md5   0

so  in one o them ther are a synchronination and unsychronise in  others

when I make a debug ntp authetification, I have

Jul 12  11:28:02.895 GMT+2:  Authentication key 6
in  the synchronized equipement and
Mar 16  04:01:00.370 GMT+1:  Authentication key 0
in  the unsychronised site

so  why did the equipement try to sychronyse with the key 0 sometimes and the key 6  sometimes?

Thanks in advance

Regards

Loic