EndRun Sonoma D12 - Restrict Access; Restrict Access - Telnet, SSH and SNMP

S o n o m a U s e r M a n u a l
26
C H A P T E R T H R E E
27
S o n o m a U s e r M a n u a l
N E T W O R K T I M E P R O T O C O L ( N T P )
Setting Up NTP Clients on
Windows
To congure your Windows computer to use your Sonoma Time Server, you must have successfully
completed the procedures in Configuring the NTP Server above. Client installation must be per-
formed by a user with administrative priviledges.
If you have access to a usenet news server, many problems may be solved by the helpful people who
participate in the Internet news group devoted to NTP at comp.protocols.time.ntp.
Three methods of using the Sonoma with NTP clients on Windows platforms will be described:
Basic: This is the simplest, and will operate without MD5 authentication. NTP beginners should
always perform this setup rst.
MD5: This method is trickier only because MD5 keys must be set up and distributed accurately to
the NTP clients in a secure way. The Sonoma is factory congured to authenticate its replies to NTP
MD5 clients using its default set of keys.
Broadcast/Multicast: This method simplies conguration of the clients on large networks since
specic server addresses need not be congured in each client’s ntp.conf le. It can be congured
either with or without MD5 authentication. However, it is highly recommended that authentication
be congured when using broadcast/multicast mode due to the relative ease with which a fake NTP
server can take over the clock setting of the broadcast/multicast clients on the network.
Windows: Basic NTP Client Setup
The two most common NTP clients on Windows platforms are described below. Information on
other NTP Client software is available at:
http://www.endruntechnologies.com/ntp-client.htm
Windows: w32time
Windows uses a time service called w32time which is automatically enabled by default during
Windows installation. w32time.exe synchronizes time in different ways, depending on the network
implementation used. When peer-to-peer networking is used, then each individual workstation syn-
chronizes to the NTP Server.
However, the most common method is with Windows Domain Networking. In this case, you must
congure the Primary Domain Controller (PDC) to synchronize to the NTP Server. All other servers
and workstations in the domain synchronize to the PDC. The default Windows installation procedure
automatically congures workstations and servers to synchronize to the controlling PDC. So, only
the PDC needs to be congured to synchronize to the NTP Server.
Windows: ntpd
For more precise timekeeping you should use ntpd. An easy way to install ntpd is by using a third-
party NTP compilation. A list for Windows is at this link: