Cisco Systems SMC-169 manual Configuring Poll-Based Associations, SMC-171

Page 3

Implementing NTP on Cisco IOS XR Software

How to Implement NTP on Cisco IOS XR Software

The communications between machines running NTP (known as “associations”) are usually statically configured; each machine is given the IP address of all machines with which it should form associations. Accurate timekeeping is made possible by exchanging NTP messages between each pair of machines with an association.

However, in a LAN environment, NTP can be configured to use IP broadcast messages instead. This alternative reduces configuration complexity, because each machine can simply be configured to send or receive broadcast messages. However, the accuracy of timekeeping is marginally reduced because the information flow is one-way only.

The time kept on a machine is a critical resource, so we strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. Two mechanisms are available: an access list-based restriction scheme and an encrypted authentication mechanism.

When multiple sources of time (VINES, hardware clock, manual configuration) are available, NTP is always considered to be more authoritative. NTP time overrides the time set by any other method.

How to Implement NTP on Cisco IOS XR Software

This section contains the following procedures:

“Configuring Poll-Based Associations” section on page SMC-171(optional)

“Configuring Broadcast-Based NTP Associations” section on page SMC-173(optional)

“Configuring NTP Access Groups” section on page SMC-175(optional)

“Configuring NTP Authentication” section on page SMC-178(optional)

“Disabling NTP Services on a Specific Interface” section on page SMC-180(optional)

“Configuring the Source IP Address for NTP Packets” section on page SMC-182(optional)

“Configuring the System as an Authoritative NTP Server” section on page SMC-184(optional)

“Updating the Hardware Clock” section on page SMC-185(optional)

“Verifying the Status of the External Reference Clock” section on page SMC-187(optional)

Configuring Poll-Based Associations

This task explains how to configure poll-based NTP associations.

Note No specific command enables NTP; the first NTP configuration command that you issue enables NTP.

Poll-Based Associations

Networking devices running NTP can be configured to operate in variety of association modes when synchronizing time with reference time sources. There are two ways that a networking device can obtain time information on a network: by polling host servers and by listening to NTP broadcasts. In this task, we will focus on the poll-based association modes. Broadcast-based NTP associations will be discussed in the next task, “Configuring Broadcast-Based NTP Associations.”

Cisco IOS XR System Management Configuration Guide

SMC-171

Image 3
Contents Implementing NTP on Cisco IOS XR Software SMC-170 NTP Functional OverviewConfiguring Poll-Based Associations Poll-Based AssociationsSMC-171 SMC-172 Summary StepsConfiguring Broadcast-Based NTP Associations Broadcast-Based NTP AssociationsSMC-173 SMC-174 Configuring NTP Access Groups NTP Access GroupsSMC-175 SMC-176 SMC-177 Configuring NTP Authentication NTP AuthenticationSMC-178 SMC-179 Supported is md5SMC-180 Disabling NTP Services on a Specific InterfaceSMC-181 SMC-182 Configuring the Source IP Address for NTP PacketsSMC-183 SMC-184 Configuring the System as an Authoritative NTP ServerSMC-185 Updating the Hardware ClockSMC-186 Verifying the Status of the External Reference Clock ExamplesSMC-187 Configuring Poll-Based Associations Example Configuring Broadcast-Based Associations ExampleSMC-188 Configuring NTP Access Groups Example Configuring NTP Authentication ExampleSMC-189 Configuring the Source IP Address for NTP Packets Example Disabling NTP on an Interface ExampleSMC-190 MIBs Updating the Hardware Clock ExampleRelated Documents StandardsRFCs Technical AssistanceSMC-192