server (NTP)
Syntax
server address { key key; nts remote-identity { hostname hostname; distinguished-name(container container | wildcard wildcard); } prefer; routing-instance routing-instance; version version; }
Hierarchy Level
[edit system ntp]
Description
For NTP, configure the local router
or switch to operate in client mode with the remote system at the
specified address
. In this mode, the
local router or switch can be synchronized with the remote system,
but the remote system can never be synchronized with the local router
or switch.
If the NTP client time drifts so that the difference in time from the NTP server exceeds 128 milliseconds, the client is automatically stepped back into synchronization. If the offset between the NTP client and server exceeds the 1000-second threshold, the client still synchronizes with the server, but it also generates a system log message noting that the threshold was exceeded.
Options
address |
Address of the remote system. You must specify an address, not a hostname. |
key key-number |
(Optional) Use the specified key number to encrypt authentication fields in all packets sent to the specified address.
|
nts |
Enables Network Time Security (NTS), which uses Transport Layer Security (TLS) protocol and Authenticated Encryption with Associated Data (AEAD) to obtain network time in an authenticated manner to the users. Specified server must also support the NTS feature when you enable NTS on a client device. |
remote-identity |
(Optional) Configure the options to verify the NTS enabled server’s identity. |
hostname hostname |
(Optional) Specify the fully qualified domain name (FDQN) of the server. This hostname should match with the FQDN of the server in its local certificate’s Subject Alternative Name field. |
distinguished-name (container container | wildcard wildcard) |
(Optional) You can verify the identity of NTS-enabled server by its distinguished name in the server certificate.
|
prefer |
(Optional) Mark the remote system as preferred host, which means that if all other things are equal, this remote system is chosen for synchronization among a set of correctly operating systems. |
routing-instance routing-instance |
(Optional) Routing instance through which the server is reachable. Note:
You can use the routing instance name When configuring the NTP service in the management VRF
( |
version value |
(Optional) Specify the version number to be used in outgoing NTP packets.
|
Required Privilege Level
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.