Does the S100 support NTP v4? | Symmetricom manual

SyncServer S100

How many NTP requests can be processed by the S100 each second?

More than 5,000 requests per second can be processed.

Does the S100 support NTP v4?

The S100 does incorporate the added functions of NTP v4. Specifically, the S100 supports the autokey scheme to secure the delivery of the NTP packets to NTP v4 clients as well as authentication of the server to the client.

Can the S100 utilize a certificate from an external CA?

The S100 can acquire a digital certificate from a public or private CA. The ability to generate a PKCS 10

certificate request is supported from the S100 secure web interface.

How is the interface to the S100 secured?

The S100 supports a https (SSL) interface for remote client management.

What security functions are provided with the S100?

•NTP v3: crypto check sum

•NTP v4: Autokey

•Https: SSL v3 (web based user interface)

•SSH: SSL v3 remote login (secure terminal interface)

Does the S100 support any functions to restrict user access to NTP service? Can the S100 set up clients' IP address to be connected?

The S100 can be configured with a IP address-based restrict list to selectively deny NTP service to a subnet or a single network client. Refer to the “restrict” command in the NTP documentation.

What is the bandwidth utilization (TCP/IP) each time an NTP client gets a time update from the NTP server?

Standard NTP request is a 48-byte UDP packet and the reply is the same. NTP v3 authentication adds 12 or 16 bytes to that, on request and reply. NTP v4 adds about the same with a few extra overhead packets.

112	S100 User Guide – Rev. D – June 2005

Image 120

Symmetricom manual Does the S100 support NTP v4?, Can the S100 utilize a certificate from an external CA?

Contents

S100 User Guide S100 User Guide Rev. D June Table of Contents Chapter Web-Based Interface TCP/IP Chapter Operations & Time-Protocols Appendix a S100 Specifications 119 Appendix C Appendix E Antenna Replacement 141 Index 143 How to Go here for the answer Introduction and OverviewChapter Conventions Used Term Definition Product Details Time StandardsGlobal Positioning System GPS Stratum Levels Time Synchronization and BusinessStratum Level Significance How the S100 Solves the Problem National Measurement InstitutesCountry Name of NMI Abbreviation Special Safety Instructions S100 Technology OverviewS100 Product Overview Sources of Time Web-based Access Time Distribution Model How the S100 Works S100 and NTP v4’s Security Features S100 and Time DistributionS100 and Client Software S100 and the Global Positioning System SyncServer S100 Installation and Configuration Getting Up and RunningUnpacking Your S100 For the S100-Dial-up/ACTS For the S100-GPS For the S100-Dial-up/ACTS For the S100-GPS Your CD-ROM N c S e rv e r Using the Software PuTTY Folder Details PSFTP.EXE PUTTYGEN.EXE Installing Your S100 Primary Power ConnectionImportant Safety Instructions Rack Mounting Making All Connections An Overview Setting Up the Hardware On the S100 Front Panel On the S100 Rear Panel Appendix E on Installing the GPS Antenna Choosing an Antenna LocationOutdoors Installing the GPS antenna Connecting the Rubidium OptionEstablishing a Serial Connection 4Connecting the S100 Setting Up the IP Address 5COM Port Properties 6Login and Command Line Testing Network Functionality 9IPCONFIG and Ping Screen Turning Off Your S100 Normal How to Acquire Time Logging On Administrator Log-In System Status Logged Configuration Wizard Next Step Dial-up to NISTs Automated Computer Time Service Acts Choose Your Time Source 17Configuring the S100 Time Source GPS Then click Next for the System Information dialog System Tests Dialog Test Results dialog Setup Complete dialog Dialup Settings dialog System Information dialog System Tests dialog Test Results dialog NTP 30System Information fields Click Test Now Configuring NTP IRIG-B v.120,122,123 Dialup Backup dialog 36System Testing options 37Test Results shown Using SymmTime Installing SymmTime SyncServer S100 Next Use the Web-Based Interface To Synchronize SymmTime SyncServer S100 Web-Based Interface Interface Screen Reference Administrative Interface Logging Admin Interface Base Menu 2Administrative Interface Base Menu Administrative Menu Expanded 3Interface Admin Menu, expanded Timing Configuration System Status 5Configuring New Clients and Servers NTP Relationships S100 User Guide Rev. D June NTP Time Source Test NTP Dialup NTP Restart NTP Status SyncServer S100 10Viewing the NTP Configuration File Advanced ntp.conf Advanced Keys/Certificates 11Obtaining and Generating Keys Certificates Main Settings Timing Engine Timecode Settings IRIG-A IRIG-B GPS Information GPS HealthBit Position Meaning if bit value = GPS Signal Strength 15GPS Signal Strength GPS Time GPS Position Clock Settings Other InformationEngine Time Control Settings 20Control Settings Networking Model Information S100 User Guide Rev. D June Ifconfig Output Ping Traceroute Options Administration Shutdown/Reboot Admin Users Restart Web Interface System Log Configuration Time Zone Snmp Configuration Snmp Edit Alarms 33Setting Alarm Parameters Logs NTP Log Boot Log System Log Config Log Http Log Help SyncServer HelpNtpd Help Search Ntpd Manual Logging Off 40Log Off screen SyncServer S100 Sysplex Timer How the S100 Uses the Sysplex TimerOperations & Time-Protocols S100 Operations and Time Protocols 41Time Information String Parameters Time Protocol RFC Daytime Protocol RFC Simple Network Time Protocol RFC Network Time Protocol RFCNTP Data Format Leap Indicator LI ModeStratum Poll Precision Version Number VN Mode StratumPoll Interval Synchronizing Distance Root Distance Version NTP Authentication Authentication NTP Typical NTP Configuration Considerations Authentication NTP v4 AutokeyHow NTP Defines the Authentication Process Public Domain NTP Package Other NTP Considerations Clients Basic NTP Configuration S100 User Guide Rev. D June SyncServer S100 S100 User Guide Rev. D June 43Large Net NTP Configuration 44Large Net NTP Configuration 45Small Net NTP Configuration Acts Interface Dial-up PeersSecurity Snmp Simple Network Management Protocol Acts Operation Version 106 S100 User Guide Rev. D June An authenticated and encrypted request example Parameter Command Line Flag Snmp.conf token 108 S100 User Guide Rev. D June Frequently Asked Questions QuestionsHow can we obtain NTP client software to use with the S100? What are the main differences between Sntp and NTP clients? How does the S100 handle Leap Second? How do I check versions of the software in the S100? How do I know if the satellite signal strength is good? Cable length and Type Antenna Does the S100 support NTP v4? Can the S100 utilize a certificate from an external CA?How is the interface to the S100 secured? What security functions are provided with the S100? How-to’s and Tips How to install NTP v4 on a Unix system How to install your S100How to get time using dial-up How to get time using GPS How to install your GPS antenna How to acquire and install SymmTimeUse the quick How to guide How to change the root password Solutions How to get information about NTPS100 does not respond to ping command S100 does not respond to NTP queries Possible cause of tracking problems How to fix My S100 won’t track satellites 118 S100 User Guide Rev. D June S100 Specifications S100 Data Sheet SpecificationsAppendix a Component Specifics Description Pin Descriptions Time Glossary Appendix B BCD CdmaCdsa Content Filtering Certificate Authority CACertificate Extension Certificate Request Dcls DESDhcp DSA SS/NTPDSS DTT GMT GPSHtml Http IKE IrigITU LAN LdapMD5 MIB Nist NOCNtms NTP OSI PCIPkcs PKI RSA SHA-1Mime Snmp SSLSSL-LDAP TCP/IP Tftp TLSTMC TPC TSA TSPTSR UDP/IP UTC VPNW3C WAN 509 v3 Certificate Extension Customer Assistance Appendix DUS Assistance Center Emea Assistance Center Emeasupport@symmetricom.com Declaration of Conformity Appendix CSymmetricom, Inc Westwind Blvd Santa Rosa, Ca USA Conforms to the Following European Union Directives FCC Antenna Replacement Appendix E 142 S100 User Guide Rev. D June Index Numerics 144 S100 User Guide Rev. D June S100 User Guide Rev. D June 145 Denial of Service DES S100 User Guide Rev. D June 147 Https Irig a 150 S100 User Guide Rev. D June S100 User Guide Rev. D June 151 152 S100 User Guide Rev. D June S100 User Guide Rev. D June 153 154 S100 User Guide Rev. D June S100 User Guide Rev. D June 155 Vault Verification Version Virus VPN W3C Wait time WAN 509 v3 Certificate Extension Coordinate Year 158 S100 User Guide Rev. D June