NTP Access Lists

[rockey]

Hi we have configured NTP authentication with access group query only with acl permit ntp server ip but when i apply this then after 2-5 min ntp status shows unsynchronised

kindly help me

[Deepak Kumar]

Hi, 

Is it possible to share ACL configuration? Are you configure "Peer" access group to NTP client?

Regards,

Deepak Kumar 

[rockey]

Hi

We using extended acl

10 permit ip host x.y.z.a any

xyza is ntp server ip

we using query only for ntp access group

[Deepak Kumar]

Hi, 

As I remember and reading an article:

Query-only – only accepts NTP control queries. No response to NTP requests are sent, and no local system time synchronization with remote system is permitted.

But 

Peer – permits router to respond to NTP requests and accept NTP updates. NTP control queries are also accepted. This is the only class which allows a router to be synchronized by other devices.

I hope, peer can resolve your issue:

http://blog.internetworkexpert.com/2008/07/28/ntp-access-control/

Regards,

Deepak Kumar

[rockey]

Hi if we use serve then its also take and sync successfully 

kindly explain if you can which is better peer or serve for better security 

[Deepak Kumar · Accepted solution]

Hi, 

For the clients, Peer is commended. 

Regards,

Deepak Kumar

[rockey]

Hi

One more question about If i set manually clock timezone by this command then it will take manually or take ntp time

Example

Ntp time ist 5 30

And manually clock timezone ist 1 30

Then whose time client router take ntp or manually set timezone

And i set manually

[Deepak Kumar]

Hi, 

The client will update his time according to manually added timezone. 

clock timezone ist 1 30 

Regards,

Deepak Kumar

[rockey]

Thanx for your quick response

Then what about NTP Syncing?

If manually set and ntp configuration done then its not take ntp time

I want to sync only with ntp then what we do ?