本帖最后由 宅男女神 于 2016-9-11 10:45 编辑
为安全起见如果你想验证与其他系统的关联请使用下面的命令。第一条命令打开NTP 身份
验证功能。第二条命令定义了认证密钥。每个密钥均有一个密钥号码,密钥类型和密钥值。
目前,唯一重点支持的密钥类型是MD5。第三条命令定义了“可信”的认证密钥列表。如
果密钥是值得信赖的,系统NTP 包将准备用它来同步到时钟系统。为了配置NTP 身份验证,
在全局配置模式下使用下列命令:
ntp authenticate
!--- Enables the NTP authentication feature
ntp authentication-key number md5 value
!--- Defines the authentication keys
ntp trusted-key key-number
!--- Defines trusted authentication keys
下面是在2800 系列路由器上配置NTP 服务器的的例子。路由器为主NTP 服务器,这意味着
路由器将作为权威的NTP 服务器。
ntp master
ntp authenticate
ntp authentication-key 1 md5 0305480F0008 7
ntp trusted-key 1
在无线控制器上配置NTP 服务器
从思科统一无线网络7.0.116.0 版本开始,你还可以配置无线控制器和NTP 服务器之间的认
证通道。通过无线控制器GUI 配置NTP 验证请执行以下步骤:
1. 选择Controller > NTP > Servers,打开配置NTP 服务器的页面。单击“新建”添加一个NTP
服务器。
NTP Servers > New 页面出现。
思科无线局域网控制器NTP配置举例 参考配置文档+排错宝典
思科无线局域网控制器NTP配置举例 参考配置文档+排错宝典
故障排查
在无线控制器上完成NTP 服务器配置后,您可以使用debug ntp detail enable 命令来查看相
关的事件序列。成功的命令输出如下:
*sntpReceiveTask: Nov 23 15:08:24.360: Started=3531049704.360568 2011 Nov 23 15:08:24.360
*sntpReceiveTask: Nov 23 15:08:24.360: Looking for the socket addresses
*sntpReceiveTask: Nov 23 15:08:24.360: NTP Polling cycle: accepts=0, count=5, attempts=1,
retriesPerHost=6. Outgoing packet on NTP Server on socket 0:
*sntpReceiveTask: Nov 23 15:08:24.360: sta=0 ver=3 mod=3 str=15 pol=8 dis=0.000000
ref=0.000000
*sntpReceiveTask: Nov 23 15:08:24.361: ori=0.000000 rec=0.000000
*sntpReceiveTask: Nov 23 15:08:24.361: tra=3531049704.360889 cur=3531049704.360889
*sntpReceiveTask: Nov 23 15:08:24.361: Host Supports NTP authentication with Key Id = 1
*sntpReceiveTask: Nov 23 15:08:24.361: NTP Auth Key Id = 1 Key Length = 5
*sntpReceiveTask: Nov 23 15:08:24.361: MD5 Hash and Key Id added in NTP Tx packet
*sntpReceiveTask: Nov 23 15:08:24.361: Flushing outstanding packets
*sntpReceiveTask: Nov 23 15:08:24.361: Flushed 0 packets totalling 0 bytes
*sntpReceiveTask: Nov 23 15:08:24.361: Packet of length 68 sent to 10.78.177.30 UDPport=123
*sntpReceiveTask: Nov 23 15:08:24.363: Packet of length 68 received from 10.78.177.30
UDPport=123
*sntpReceiveTask: Nov 23 15:08:24.363: KeyId In Recieved NTP Packet 1
*sntpReceiveTask: Nov 23 15:08:24.363: KeyId 1 found in recieved NTP packet exists as part of
the trusted Key/s
*sntpReceiveTask: Nov 23 15:08:24.363: The NTP trusted Key Id 1 length = 5
*sntpReceiveTask: Nov 23 15:08:24.363: NTP Message Authentication - SUCCESS
*sntpReceiveTask: Nov 23 15:08:24.363: sta=0 ver=3 mod=4 str=8 pol=8 dis=3.875031
ref=3531071269.384065
*sntpReceiveTask: Nov 23 15:08:24.363: ori=3531049704.360889 rec=3531071270.103183
*sntpReceiveTask: Nov 23 15:08:24.363: tra=3531071270.103387 cur=3531049704.363251
资源批量下载地址: ---> http://bbs.vlan5.com/forum-94-1.html
更多精品资源,打包下载(可按知识点/发布日期/培训班/讲师等方式批量下载视频/文档/资料/电子书)
本贴附件下载链接:
|