EndRun Sonoma D12 - Disable Protocols; Disable Telnet, Time and Daytime; Disable SNMP, SSH and HTTPS

S o n o m a U s e r M a n u a l
28
C H A P T E R T H R E E
29
S o n o m a U s e r M a n u a l
N E T W O R K T I M E P R O T O C O L ( N T P )
you will see the ntpq.exe command prompt:
ntpq>
Use the command
peers
to display the NTP peers which your computer is using. One of them should be the Sonoma server
which you have just congured. You should verify that it is being ‘reached’. (You may have to con-
tinue issuing the peers command for a minute or two before you will see the ‘reach’ count increment.)
You can verify that authentication is being used by issuing the command
associations
to display the characteristics of the client server associations. In the “auth” column of the display,
you should see “OK” for the row corresponding to the Sonoma server. If you see “bad”, you should
wait a few minutes to be sure that there is a problem since “bad” is the initial state of this setting. If
the “bad” indication persists then you must check your conguration for errors. Typically this is due
to a typing error in creating the ntp.keys le on the client that causes a mismatch between the keys
being used by the server and client. (If you transfer the le by ftp or scp, this shouldn’t be a prob-
lem.) It is also possible to have a typing error in the ntp.conf le that causes the needed key to not be
included in the “trustedkey” list.
Windows: Broadcast/Multicast NTP Client Setup
Broadcast/multicast client setup is relatively simple, if:
• You have been able to successfully communicate with the Sonoma on your network.
• Your Sonoma has been congured to perform broadcasts or multicasts by running the ntpconfig
shell script. (This is not the factory default conguration, so be sure to run ntpconfig.) If you are
going to use MD5 authentication, your Sonoma must have been congured to operate with authenti-
cation in the broadcast/multicast mode, and you must know which of the trusted keys it is using for
broadcast/multicast operation. The example Sonoma conguration shown in Configuring the NTP
Server above will be assumed in the example conguration commands shown here.
• You have installed NTP on your client computer.
• You have successfully performed the Windows: MD5 Authenticated NTP Client Setup on your
client computer, if you plan to use MD5 authentication.
Configure NTP Client for Broadcast
You must edit the ntp.conf le. Assuming that your Sonoma server has been congured to use key 2
for broadcast authentication as shown in the example in Configuring the NTP Server above, make
sure that key 2 is included in the trustedkey line, and add this line to the end of the ntp.conf le:
broadcastclient