Configure the device as an NTP server

Required Configuration Items

Additional Configuration Options

To configure the IX10 device's NTP service:

  1. Choose the management interface you want to use to access your device. Click a dropdown for instructions.

    1. Log in to Digi Remote Manager.

    1. Navigate to the device's dashboard.

    1. Log in to your device's Web UI.

    Log in to your device's Admin CLI via an SSH client, Telnet client, or terminal emulator.

  2. Configure the settings.

    1. Click to open the device's configuration menu.

      • In Digi Remote Manager, on the device dashboard, click Settings.

      • In the Web UI, click Device Configuration.

    2. Click Services > NTP.
    3. Enable the IX10 device's NTP service by clicking Enable.
      • To limit access to specified IPv4 addresses and networks:
        1. Click IPv4 Addresses.
        2. For Add Address, click .
        3. For Address, enter the IPv4 address or network that can access the device's NTP service. Allowed values are:
          • A single IP address or host name.
          • A network designation in CIDR notation, for example, 192.168.1.0/24.
          • any: No limit to IPv4 addresses that can access the NTP service.
        4. Click again to list additional IP addresses or networks.
      • To limit access to specified IPv6 addresses and networks:
        1. Click IPv6 Addresses.
        2. For Add Address, click .
        3. For Address, enter the IPv6 address or network that can access the device's NTP service. Allowed values are:
          • A single IP address or host name.
          • A network designation in CIDR notation, for example, 2001:db8::/48.
          • any: No limit to IPv6 addresses that can access the NTP service.
        4. Click again to list additional IP addresses or networks.
      • To limit access to hosts connected through a specified interface on the device:
        1. Click Interfaces.
        2. For Add Interface, click .
        3. For Interface, select the appropriate interface from the dropdown.
        4. Click again to allow access through additional interfaces.
      • To limit access based on firewall zones:
        1. Click Zones. By default, there are three firewall zones already configured: Internal, Edge, and IPsec.
        2. For Add Zone, click .
        3. For Zone, select the appropriate firewall zone from the dropdown.

          See Firewall configuration for information about firewall zones.

        4. Click again to allow access through additional firewall zones.

      Note By default, the access control list for the NTP service is empty, which means that all downstream hosts connected to the IX10 device can use the NTP service.

    5. Enable Fall back to local clock to allow the device's local system clock to be used as backup time source.
      • To change the default value of the NTP server:
        1. Click NTP servers.
        2. For Server, type a new server name.
      • To add an NTP server:
        1. Click NTP servers.
        2. For Add Server, click .
        3. For Server, enter the hostname of the upstream NTP server that the device will use to synchronize its time.
        4. Click to add additional NTP servers. If multiple servers are included, servers are tried in the order listed until one succeeds.

      Note This list is synchronized with the list of servers included with NTP client configuration, and changes made to one will be reflected in the other. See Configure the system time synchronization for more information about NTP client configuration.

      1. Click System > Time
      2. Select the Timezone for the location of your IX10 device.
    8. Click Apply to save the configuration and apply the change.

    1. At the CLI prompt, type config and then press Enter.

    2. Enable the ntp service:
      (config)> service ntp enable true
(config)>
      • To delete the default NTP server, time.devicecloud.com:
        (config)> del service ntp server 0
(config)>
      • To add the NTP server to the beginning of the list, use the index value of 0 to indicate that it should be added as the first server:
        (config)> add service ntp server 0 time.server.com
(config)>
      • To add the NTP server to the end of the list, use the index keyword end:
        (config)> add service ntp server end time.server.com
(config)>
      • To add the NTP server in another location in the list, use an index value to indicate the appropriate position. For example:
        (config)> add service ntp server 1 time.server.com
(config)>

      Note This list is synchronized with the list of servers included with NTP client configuration, and changes made to one will be reflected in the other. See Configure the system time synchronization for more information about NTP client configuration.

    4. Allow the device's local system clock to be used as backup time source:
      (config)> service ntp local true
(config)>
      • To limit access to specified IPv4 addresses and networks:
        (config)> add service ntp acl address end value
(config)>

        Where value can be:

        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 192.168.1.0/24.
        • any: No limit to IPv4 addresses that can access the NTP server agent.

        Repeat this step to list additional IP addresses or networks.

      • To limit access to specified IPv6 addresses and networks:
        (config)> add service ntp acl address6 end value
(config)>

        Where value can be:

        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 2001:db8::/48.
        • any: No limit to IPv6 addresses that can access the NTP server agent.

        Repeat this step to list additional IP addresses or networks.

      • To limit access to hosts connected through a specified interface on the IX10 device:
        (config)> add service ntp acl interface end value
(config)>

        Where value is an interface defined on your device.

        Use ... network interface ? to display interface information:

        (config)> ... network interface ?

Interfaces

Additional Configuration
-------------------------------------------
 setupip             Setup IP
 setuplinklocalip       Setup Link-local IP
 eth                    ETH
 loopback               Loopback
 modem                  Modem

config)>

        Repeat this step to list additional interfaces.

      • To limit access based on firewall zones:
        (config)> add service ntp acl zone end value
(config)>

        Where value is a firewall zone defined on your device, or the any keyword.

        Type ... firewall zone ? at the config prompt:

        (config)> ... firewall zone ?

Zones: A list of groups of network interfaces that can be referred to by packet
filtering rules and access control lists.

 Additional Configuration
 -------------------------------------------------------------------------------
  any
  dynamic_routes
  edge
  external
  internal
  ipsec
  loopback
  setup

(config)>

        Repeat this step to include additional firewall zones.

      Note By default, the access control list for the NTP service is empty, which means that all downstream hosts connected to the IX10 device can use the NTP service.

    6. (config)> system time timezone value
(config)>

      Where value is the timezone using the format specified with the following command:

      (config)> system time timezone ?

Timezone: The timezone for the location of this device. This is used to adjust the time for log
messages. It also affects actions that occur at a specific time of day.
Format:
  Africa/Abidjan
  Africa/Accra
  Africa/Addis_Ababa
  ...

(config)>

    7. Save the configuration and apply the change.
      (config)> save
Configuration saved.
>
    8. Type exit to exit the Admin CLI.

      Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.