iscw10s05l05安全管理和報(bào)告-資料下載頁(yè)
2025-01-09 19:58本頁(yè)面
【正文】 packets Router(config) Configuring NTP Server Implementing NTP Server ? Cisco IOS routers work as an NTP server by default. ? As soon as a router is synchronized to an authoritative time source, it will allow peers with lower stratum to synchronize to that router: – Requires a peer association ? You can make a router an authoritative NTP server, even if the system is not synchronized to an outside time source. ? Two options to establish a peer association: – Unicast – Broadcast ? Same exchange control methods as with client: – Packet authentication – Access group filtering Configuring NTP Server ntp master [stratum] R2(config)ntp peer key 1 R2(config)ntp master 3 R2(config)interface Fastether0/0 R2(configint)ntp broadcast ? Makes the system an authoritative NTP server ntp broadcast [version number][destination address][key keyid] ? Configures an interface to send NTP broadcast packets Router(configint) ntp peer ipaddress [normalsync][version number] [key keyid] [source interface] [prefer] Router(config) ? Forms a peer association with another system Router(config) NTP Configuration Example Source(config)ntp master 5 Source(config)ntp authenticationkey 1 md5 secretsource Source(config)ntp peer key 1 Source(config)ntp source loopback 0 Intermediate(config)ntp authenticationkey 1 md5 secretsource Intermediate(config)ntp authenticationkey 2 md5 secretclient Intermediate(config)ntp trustedkey 1 Intermediate(config)ntp server Intermediate(config)ntp source loopback 0 Intermediate(config)interface Fastether0/0 Intermediate(configint)ntp broadcast Client(config)ntp authenticationkey 1 md5 secretclient Client(config)ntp trustedkey 1 Client(config)interface Fastether0/1 Client(configint)ntp broadcast client Summary ? Since OOB management provides higher levels of security and performance than inband, the decision to use an inband solution must be considered carefully. ? Management munications should use SSH rather than Tel. ? Implementing a router logging facility is an important part of any work security policy. ? Syslog is implemented on your Cisco router using syslog router mands. ? Network management will be greatly enhanced by implementing the security features of SNMPv3 rather than earlier versions. ? Cisco IOS SNMPv3 server configuration tasks include configuring SNMPserver engine ID, group names, users, and hosts. ? Cisco routers can be configured as NTP servers or clients. ? Packet authentication and filtering should be used to protect NTP exchange.
試題試卷相關(guān)推薦
鄂ICP備17016276號(hào)-1