topic Sorry for the trouble, am in Network Security

NTP

anand.network — Fri, 21 Feb 2020 13:44:26 GMT

Can someone please explain about the "NTP"" and its "purpose" and "how it will work" and what are the configuration I have to do in my data center devices..??

It sounds like you want an

Philip D'Ath — Mon, 29 Feb 2016 19:04:38 GMT

It sounds like you want an essay. Culd you let us know the kind of kit you want to synchronise NTP on?

Short answers:

Purpose: To synchronise the time on devices across a network

How it works: You have various NTP servers of varying levels of trust (the stratum level) and clients talk to 1 or more of these to determine the time. Note you need 4 NTP servers or more to do really accurate synchronisation (ballantines general problem).

Here is a brief article on SANs that makes interesting reading.

https://www.sans.org/reading-room/whitepapers/protocols/its-about-time-1531

On most Cisco kit you can time synchronisation as a client with:

ntp server a.b.c.d

Hi Philip,

anand.network — Tue, 01 Mar 2016 07:58:28 GMT

Hi Philip,

Thank you for the response,

Please correct me if am wrong.

I understood, instead of we manually change the time on each routers & switches in our DC, we are using the NTP server, which will do automatic time.

Sorry for the trouble, am

anand.network — Tue, 01 Mar 2016 07:59:59 GMT

Sorry for the trouble, am just a beginner in network, hence basic & clear explanation would be great

If I have 2 DCs, Do I really

anand.network — Tue, 01 Mar 2016 08:19:07 GMT

If I have 2 DCs, Do I really need to have the separate NTP server on each DC or placing the NTP in main DC is enough.

A DC runs an NTP server, so

Philip D'Ath — Tue, 01 Mar 2016 19:02:23 GMT

A DC runs an NTP server, so you can point your Cisco kit at it to get the current date/time.

So, If I deploy new NTP

anand.network — Wed, 02 Mar 2016 04:02:04 GMT

So, If I deploy new NTP server, that server has to sync with public NTP servers, hence i have to allow my internal NTP server to access internet, is it right..??

It depends on what you want

Philip D'Ath — Wed, 02 Mar 2016 06:07:43 GMT

It depends on what you want from your time synchronisation.

If you just want all your internal devices to have the same time, so you can compare logs and the like then you don't need to access a public NTP server or Internet access. You just need to nominate 1 (or more) internal devices to be NTP servers and point everything else at them.

If you want your devices to be synced to the actual time then you get get yourself an actual NTP server with an external reference, such as GPS, and you still don't have to sync against anything on the Internet.

However you you just want to have accurate time at minimum cost, you you do need to sync against a free public NTP server.

Correct.

Philip D'Ath — Wed, 02 Mar 2016 20:04:55 GMT

Correct.