server:
(config)#clock timezone GMT +8 /*必须先配置时区,后配置时间*/
#clock set 12:00:00 1 may 2012
(config)#ntp authentication-key 1 md5 cisco /*创建key认证*/
(config)#ntp trusted-key 1 /*指定信任key*/
(config)#ntp authenticate /*启用认证*/
(config)#ntp master /*启用服务器模式*/
#show ntp status
Clock is synchronized, stratum 8, reference is 127.127.7.1
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**18
reference time is D5305ACF.C188DBC5 (12:13:03.755 GMT Sun May 1 2012)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.02 msec, peer dispersion is 0.02 msec
client:
(config)#clock timezone GMT +8 /*必须先配置时区*/
(config)#ntp authentication-key 1 md5 cisco /*创建key认证*/
(config)#ntp trusted-key 1 /*指定信任key*/
(config)#ntp authenticate /*启用认证*/
(config)#ntp server 12.1.1.1 key 1 /*启用客户模式,指定服务器地址和key*/
#show ntp status
Clock is synchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**18
reference time is D53058FA.6512E310 (12:13:03.755 GMT Sun May 1 2012)
clock offset is -3.6351 msec, root delay is 47.88 msec
root dispersion is 13.70 msec, peer dispersion is 10.03 msec
需要注意的问题:ntp服务器在远端向其同步之前,需要进行同步自己的过程,之后才能提供时钟服务,如果配置了 ntp access-group serve 100(acl 100 指定了哪些源地址可以来与其同步,进行范围限制),一定要放行自己,而不能只放行远端客户端。