From: John Matijevic (matijevi@bellsouth.net)
Date: Fri Jun 27 2003 - 14:56:42 GMT-3
Hello CC2B,
You do need the ntp trusted key on every router that will participate in
authentcation including the ntp server.
Sincerely,
Matijevic
----- Original Message -----
From: "ccie2be" <ccie2be@nyc.rr.com>
To: "Group Study" <ccielab@groupstudy.com>
Sent: Friday, June 27, 2003 12:52 PM
Subject: NTP hedaches
> Hi all,
>
> I've been having problems getting NTP to work as expected.
>
> I have 3 2500's, rtr A, rtrB, and rtrC connected to each other via a
common
> ethernet segment.
>
> rtrA-----------------rtrB
> |
> |
> rtrC
>
>
> rtrA config:
> ntp master 6
>
> rtrB config:
> ntp master 10
> ntp server 10.0.1.1 (rtrA's lo0 addr)
>
> rtrC config:
> ntp peer 10.0.1.1
> ntp peer 10.0.2.2 (rtrB's lo0 addr)
>
> Problems and issues:
> Before rtrC was configured, rtrB sync'ed with rtrA as expected, but now
rtrA
> won't sync with itself and rtrC is syncing with rtrB. Shouldn't rtrC sync
> with rtrA since it has a lower stratum?
>
> Why doesn't rtrA sync with itself? Show ntp asso det shows "insane,
invalid,
> etc.
>
> rtrA and rtrB had sync'ed up properly before I configured authentication
but
> then it stopped working correctly so I removed the authentication and now
it
> won't work. Any ideas as to what's going on?
>
> When doing authentication, is the following necessary?
>
> ntp client:
> ntp server a.b.c.d key # ( Is this needed when the command, ntp
> trusted key #, is used?)
> ntp trusted key # ( Is this needed if the key# option is
> used in the above command?)
> ntp authentication-key # md5 <password>
> ntp authenticate
>
>
> According to Doyle, volume II, the command, ntp trusted key # isn't needed
on
> the ntp master, but when I removed it from the master, ntp stopped
working?
> Doyle isn't wrong on this point is he?
>
> Thanks for any insight you can provide, Jim
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Jul 04 2003 - 11:11:12 GMT-3