ELTEX ESR-10 - Page 591

ESR series service routers.ESR-Series. User manual
591
Solution:
Main configuration step:
Enable synchronization of the system clock with remote servers:
esr(config)#ntpenable
NTP server configuration:
esr-(config)#ntpserver192.168.52.41
Specify the preference for this NTP server (optional):
esr-1000(config-ntp)#prefer
Specify the time interval between sending messages to the NTP server:
esr(config-ntp)# minpoll 4
esr(config-ntp)# end
esr# commit
esr# confirm
Command to view the current configuration of the NTP protocol:
esr# showntpconfiguration
Command to view the current state of NTP servers (peers):
esr# show ntp peers
•
•
First, do the following:
specify security zone for gi1/0/1 interface;
configure the IP address for the gi1/0/1 interface to provide IP connectivity to the NTP server.
Example:
security zone untrust
exit
object-group service NTP
port-range 123
exit
interface gigabitethernet 1/0/1
security-zone untrust
ip address 192.168.52.8/24
exit
security zone-pair untrust self
rule 10
action permit
match protocol udp
match destination-port NTP
enable
exit
exit
