HP (Hewlett-Packard) 3500 Switch User Manual


 
Time Protocols
SNTP: Viewing, Selecting, and Configuring
This feature provides support for SNTP client authentication on HP ProCurve
switches, which addresses security considerations when deploying SNTP in
a network.
Requirements
The following must be configured to enable SNTP client authentication on the
switch.
SNTP Client Authentication Support
Timesync mode must be SNTP. Use the timesync sntp command.
(SNTP is disabled by default.)
SNTP must be in unicast or broadcast mode. See “Configuring Unicast
and Broadcast Mode” on page 9-21.
The MD5 authentication mode must be selected.
An SNTP authentication key-identifier (key-id) must be configured on
the switch and a value (key-value) must be provided for the authenti-
cation key. A maximum of 8 sets of key-id and key-value can be
configured on the switch.
Among the keys that have been configured, one key or a set of keys
must be configured as trusted. Only trusted keys will be used for SNTP
authentication.
If the SNTP server requires authentication, one of the trusted keys
has to be associated with the SNTP server.
SNTP client authentication must be enabled on the ProCurve switch.
If client authentication is disabled, packets are processed without
authentication. All of the above steps are necessary to enable authen-
tication on the client.
SNTP Server Authentication Support
Note SNTP server is not supported on ProCurve products.
9-17