3.2.22. ntp

Top-level container for NTP configuration.

vsr running config# vrf <vrf> ntp

enabled (pushed)

Enable or disable the NTP protocol and indicates that the system should attempt to synchronize the system clock with an NTP server from the servers defined in the ‘ntp/server’ list.

vsr running config# vrf <vrf> ntp
vsr running ntp# enabled true|false
Default value
true

ntp-source-address

Source address to use on outgoing NTP packets.

vsr running config# vrf <vrf> ntp
vsr running ntp# ntp-source-address NTP-SOURCE-ADDRESS

NTP-SOURCE-ADDRESS

An IPv4 or IPv6 address.

auth-key

List of NTP authentication keys.

vsr running config# vrf <vrf> ntp auth-key <uint16>

<uint16>

Integer identifier used by the client and server to designate a secret key. The client and server must use the same key id.

key-value

NTP authentication key value.

vsr running config# vrf <vrf> ntp auth-key <uint16>
vsr running auth-key <uint16># key-value <string>

server-subnet

Allow / deny NTP clients to connect to this instance.

vsr running config# vrf <vrf> ntp
vsr running ntp# server-subnet <uint16> allow ALLOW deny DENY

<uint16>

List sequence.

allow

Allow NTP clients on this subnet to request synchronization.

allow ALLOW

ALLOW values

Description

<ip-prefix>

An IPv4 or IPv6 prefix: address and CIDR mask.

<ip-address>

An IPv4 or IPv6 address.

all

Allow all connections.

deny

Deny NTP clients on this subnet to request synchronization.

deny DENY

DENY values

Description

<ip-prefix>

An IPv4 or IPv6 prefix: address and CIDR mask.

<ip-address>

An IPv4 or IPv6 address.

all

Allow all connections.

server

List of NTP servers to use for system clock synchronization. If ‘/system/ntp/enabled’ is ‘true’, then the system will attempt to contact and utilize the specified NTP servers.

vsr running config# vrf <vrf> ntp server <server>

<server>

The host type represents either an unzoned IP address or a DNS domain name.

version

Version number to put in outgoing NTP packets.

vsr running config# vrf <vrf> ntp server <server>
vsr running server <server># version <uint8>

association-type

The desired association type for this NTP server.

vsr running config# vrf <vrf> ntp server <server>
vsr running server <server># association-type ASSOCIATION-TYPE

ASSOCIATION-TYPE values

Description

SERVER

Use client association mode. This device will not provide synchronization to the configured NTP server.

PEER

Use symmetric active association mode. This device may provide synchronization to the configured NTP server.

POOL

Use client association mode with one or more of the NTP servers found by DNS resolution of the domain name given by the ‘address’ leaf. This device will not provide synchronization to the servers.

iburst

Indicates whether this server should enable burst synchronization or not.

vsr running config# vrf <vrf> ntp server <server>
vsr running server <server># iburst true|false

prefer

Indicates whether this server should be preferred or not.

vsr running config# vrf <vrf> ntp server <server>
vsr running server <server># prefer true|false

auth-key-id

Integer identifier used by the client and server to designate a secret key. The client and server must use the same key id.

vsr running config# vrf <vrf> ntp server <server>
vsr running server <server># auth-key-id <leafref>

stratum (state only)

Indicates the level of the server in the NTP hierarchy. As stratum number increases, the accuracy is degraded. Primary servers are stratum while a maximum value of 16 indicates unsynchronized. The values have the following specific semantics: | 0 | unspecified or invalid | 1 | primary server (e.g., equipped with a GPS receiver) | 2-15 | secondary server (via NTP) | 16 | unsynchronized | 17-255 | reserved.

vsr> show state vrf <vrf> ntp server <server> stratum

root-delay (state only)

The round-trip delay to the server, in milliseconds.

vsr> show state vrf <vrf> ntp server <server> root-delay

root-dispersion (state only)

Dispersion (epsilon) represents the maximum error inherent in the measurement.

vsr> show state vrf <vrf> ntp server <server> root-dispersion

offset (state only)

Estimate of the current time offset from the peer. This is the time difference between the local and reference clock.

vsr> show state vrf <vrf> ntp server <server> offset

poll-interval (state only)

Polling interval of the peer.

vsr> show state vrf <vrf> ntp server <server> poll-interval

synchronized (state only)

True if we are synchronized with this server.

vsr> show state vrf <vrf> ntp server <server> synchronized

state (state only)

The server status in the clock selection process.

vsr> show state vrf <vrf> ntp server <server> state

time-sources

List of servers.

vsr running config# vrf <vrf> ntp time-sources

makestep

Correct the system clock by slowing down or speeding up the clock as required.

vsr running config# vrf <vrf> ntp time-sources makestep

threshold

Step the system clock if the adjustment is larger this threshold value.

vsr running config# vrf <vrf> ntp time-sources makestep
vsr running makestep# threshold <uint32>
Default value
1000

limit

Limit the step adjustment to this value.

vsr running config# vrf <vrf> ntp time-sources makestep
vsr running makestep# limit LIMIT

LIMIT values

Description

<uint16>

No description.

disabled

Disable makestep.

Default value
3

server

List of NTP servers to use for system clock synchronization. If ‘/system/ntp/enabled’ is ‘true’, then the system will attempt to contact and utilize the specified NTP servers.

vsr running config# vrf <vrf> ntp time-sources server <server>

<server>

The host type represents either an unzoned IP address or a DNS domain name.

version

Version number to put in outgoing NTP packets.

vsr running config# vrf <vrf> ntp time-sources server <server>
vsr running server <server># version <uint8>
Default value
4

association-type

The desired association type for this NTP server.

vsr running config# vrf <vrf> ntp time-sources server <server>
vsr running server <server># association-type ASSOCIATION-TYPE

ASSOCIATION-TYPE values

Description

SERVER

Use client association mode. This device will not provide synchronization to the configured NTP server.

PEER

Use symmetric active association mode. This device may provide synchronization to the configured NTP server.

POOL

Use client association mode with one or more of the NTP servers found by DNS resolution of the domain name given by the ‘address’ leaf. This device will not provide synchronization to the servers.

Default value
SERVER

iburst

Indicates whether this server should enable burst synchronization or not.

vsr running config# vrf <vrf> ntp time-sources server <server>
vsr running server <server># iburst true|false
Default value
false

prefer

Indicates whether this server should be preferred or not.

vsr running config# vrf <vrf> ntp time-sources server <server>
vsr running server <server># prefer true|false
Default value
false

auth-key-id

Integer identifier used by the client and server to designate a secret key. The client and server must use the same key id.

vsr running config# vrf <vrf> ntp time-sources server <server>
vsr running server <server># auth-key-id <leafref>

stratum (state only)

Indicates the level of the server in the NTP hierarchy. As stratum number increases, the accuracy is degraded. Primary servers are stratum while a maximum value of 16 indicates unsynchronized. The values have the following specific semantics: | 0 | unspecified or invalid | 1 | primary server (e.g., equipped with a GPS receiver) | 2-15 | secondary server (via NTP) | 16 | unsynchronized | 17-255 | reserved.

vsr> show state vrf <vrf> ntp time-sources server <server> stratum

root-delay (state only)

The round-trip delay to the server, in milliseconds.

vsr> show state vrf <vrf> ntp time-sources server <server> root-delay

root-dispersion (state only)

Dispersion (epsilon) represents the maximum error inherent in the measurement.

vsr> show state vrf <vrf> ntp time-sources server <server> root-dispersion

offset (state only)

Estimate of the current time offset from the peer. This is the time difference between the local and reference clock.

vsr> show state vrf <vrf> ntp time-sources server <server> offset

poll-interval (state only)

Polling interval of the peer.

vsr> show state vrf <vrf> ntp time-sources server <server> poll-interval

synchronized (state only)

True if we are synchronized with this server.

vsr> show state vrf <vrf> ntp time-sources server <server> synchronized

state (state only)

The server status in the clock selection process.

vsr> show state vrf <vrf> ntp time-sources server <server> state