The authentication-check command provides the option to skip the rejection of NTP PDUs that do not match the authentication key or authentication type requirements. The default behavior when authentication is configured is to reject all NTP PDUs that have a mismatch in either the authentication key-id, type, or key.
When authentication-check is configured, NTP PDUs are authenticated on receipt. However, mismatches cause a counter to be incremented, one counter for key-id, one for type, and one for key value mismatches.
Use the following CLI syntax to authenticate NTP PDUs on receipt.
config>system>time>ntp
authentication-check
config>system>time>ntp#
config>system>time>ntp# authentication-check
config>system>time>ntp# no shutdown