Thursday, December 19, 2019

Secure NTP on a Catalyst Switch

I need to configure NTP on a catalyst switch so that it syncs its own time with a given NTP server but does blocks all other NTP traffic. I think that can be done with NTP access-groups but I'm not sure if I get the commands right.

Would this work?

ntp access-group peer <ACL that permits the NTP Server IP>
ntp access-group serve-only <ACL with deny any any>



No comments:

Post a Comment