topic Re: NTP settings when configuring IPS offline in Network Security

NTP settings when configuring IPS offline

jacques_henry696 — Sun, 10 Mar 2019 12:05:11 GMT

Hi all,

I am trying to configure several IPS units (SSM-20, SSM-40, IPS 4260) before sending them to their physical locations.

The problem is that when I configure the NTP server, the IPS tries to contact the server I've configured. However the IPS is offline and so it obviously fails...

----------------------------------------------------------------------------------

IDS-C7-1(config-hos)# ntp-option enabled-ntp-unauthenticated
IDS-C7-1(config-hos-ena)# ntp-server 10.0.0.1
IDS-C7-1(config-hos-ena)# exit
IDS-C7-1(config-hos)# exit
Apply Changes?[yes]: yes
Warning: DNS or HTTP proxy is required for global correlation inspection and reputation filtering, but no DNS or proxy servers are defined.

Error: Cannot connect to NTP server or NTP server is not running

The configuration changes failed validation, no changes were applied.
Would you like to return to edit mode to correct the errors? [yes]: no

No changes were made to the configuration.
IDS-C7-1(config)#
IDS-C7-1(config)#

----------------------------------------------------------------------------------

Is there a way to prevent the IPS from reaching the server, so the configuration is still applied...?

Thanks!

Re: NTP settings when configuring IPS offline

terrygwazdosky — Fri, 06 Aug 2010 18:14:45 GMT

You might be able to edit the config manually on your PC and then upload it to the sensor. I don't have a sensor that isn't in production so I can't test it out.

Re: NTP settings when configuring IPS offline

jacques_henry696 — Mon, 09 Aug 2010 09:13:24 GMT

Do you mean using a modified conf file that I would send using the copy command ? (e.g. copy scp://user@10.1.1.1//configuration/cfg current-config )

Re: NTP settings when configuring IPS offline

terrygwazdosky — Mon, 09 Aug 2010 18:14:55 GMT

Yes, that is what I mean. Let me know how it goes.