使用 CLI 配置 NTP

在 configuration services ntp 下，使用 authkey 命令编辑授权：

clownfish:configuration services ntp> authkey
clownfish:configuration services ntp authkey>

在此上下文中，可使用 create 命令添加新密钥：

clownfish:configuration services ntp authkey> create
clownfish:configuration services ntp authkey-000 (uncommitted)> get
                        keyno = (unset)
                         type = (unset)
                          key = (unset)
clownfish:configuration services ntp authkey-000 (uncommitted)> set keyno=1
                        keyno = 1 (uncommitted)
clownfish:configuration services ntp authkey-000 (uncommitted)> set type=A 
                         type = A (uncommitted)
clownfish:configuration services ntp authkey-000 (uncommitted)> set key=coconuts
                          key = ******** (uncommitted)
clownfish:configuration services ntp authkey-000 (uncommitted)> commit
clownfish:configuration services ntp authkey> 

要通过 CLI 将验证密钥与服务器相关联，应将 serverkeys 属性设置为一系列值，其中的每个值是要与 servers 属性中对应的服务器相关联的一个密钥。如果服务器不使用验证，应将对应的服务器密钥设置为 0。例如，要使用上面创建的密钥验证服务器 "gefilte" 和 "carp"：

clownfish:configuration services ntp> set servers=gefilte,carp
                      servers = gefilte,carp (uncommitted)
clownfish:configuration services ntp> set serverkeys=1,1
                   serverkeys = 1,1 (uncommitted)
clownfish:configuration services ntp> commit
clownfish:configuration services ntp>

要用密钥 1 验证服务器 "gefilte"、用密钥 2 验证服务器 "carp"，并用密钥 3 验证服务器 "dory"：

clownfish:configuration services ntp> set servers=gefilte,carp,dory
                      servers = gefilte,carp,dory (uncommitted)
clownfish:configuration services ntp> set serverkeys=1,2,3
                   serverkeys = 1,2,3 (uncommitted)
clownfish:configuration services ntp> commit
clownfish:configuration services ntp>

要用密钥 1 验证服务器 "gefilte" 和 "carp"，并另外设置一个未经验证的 NTP 服务器 "dory"，请执行以下操作：

clownfish:configuration services ntp> set servers=gefilte,carp,dory
                      servers = gefilte,carp,dory (uncommitted)
clownfish:configuration services ntp> set serverkeys=1,1,0
                   serverkeys = 1,1,0 (uncommitted)
clownfish:configuration services ntp> commit
clownfish:configuration services ntp>