System NTP Feature

Configure NTP servers and authentication if required.

Diagram

Classes

system_profiles (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
ntp	Class	[ntp]	No

ntp (sdwan.feature_profiles.system_profiles)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	No	ntp
description	String		No
authentication_keys	List	[authentication_keys]	No
authoritative_ntp_server	Boolean	true, false	No
authoritative_ntp_server_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
authoritative_ntp_server_source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
authoritative_ntp_server_source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
authoritative_ntp_server_stratum	Integer	min: 1, max: 15	No
authoritative_ntp_server_stratum_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
servers	List	[servers]	No
trusted_keys	List	Integer[min: 1, max: 65535]	No
trusted_keys_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

authentication_keys (sdwan.feature_profiles.system_profiles.ntp)

Name	Type	Constraint	Mandatory	Default Value
id	Integer	min: 1, max: 65535	No
id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
md5_value	String	min: 1	No
md5_value_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

servers (sdwan.feature_profiles.system_profiles.ntp)

Name	Type	Constraint	Mandatory	Default Value
authentication_key	Integer	min: 1, max: 65535	No
authentication_key_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
hostname_ip	IP		No
hostname_ip_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
prefer	Boolean	true, false	No
prefer_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
ntp_version	Integer	min: 0, max: 4	No
ntp_version_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
vpn_id	Integer	min: 0, max: 65530	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

Examples

Example-1: Example shows a basic NTP configuration where edge is using two NTP servers in VPN0 without authentication.

sdwan:
  feature_profiles:
    system_profiles:
      - name: system1
        description: this is test system profile
        ntp:
          name: ntp
          description: "Base NTP template; no auth key; no ntp master"
          servers:
            - hostname_ip: time-pnp.cisco.com
              prefer: true
              source_interface: Loopback0
              vpn_id: 0
            - hostname_ip: time.google.com
              prefer: false
              source_interface: Loopback0
              vpn_id: 0

Example-2: Example where edges are connecting to enterprise NTP servers inside service VPN 10 and are using authentication keys. First server is defined with static values while second one uses variables. Variables would be used for example if using same template and customer has regional NTP servers.

sdwan:
  feature_profiles:
    system_profiles:
      - name: system2
        description: "System profile for NTP example"
        ntp:
          name: ntp
          description: "NTP template in service VPN and with authentication"
          authentication_keys:
            - id: 1
              value: Cisco123
          servers:
            - hostname_ip: 172.16.0.11
              prefer: true
              source_interface: Loopback0
              vpn_id: 10
              authentication_key_id: 1
            - hostname_ip_variable: system_ntp_server2_ip
              prefer_variable: system_ntp_server2_prefer
              source_interface_variable: ntp_server2_source_interface
              vpn_id_variable: system_ntp_server2_vpnid
              authentication_key_id_variable: system_ntp_server2_keyid