- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- Comware Based
- >
- NTP and the 5900 switch
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
05-26-2014 05:20 AM
05-26-2014 05:20 AM
NTP and the 5900 switch
HI. I'm reaching out to the community to get some help with configuring the 5900 as our internal NTP time source. I want it to get its time from the ntp.org pool. Initially I just added local time to the server using the "clock datetime" command. I think I have read somewhere best practice is to add UTC time here, and use the "clock timezone" command to set the offset (which for my country is UTC+2). However when I issue the "display clock" command it display the UTC time. I have issued the "ntp-service enable command" This makes me unsure; what time will this switch give downstream hosts?
This is output from display ntp-service stat;
Clock status: unsynchronized
Clock stratum: 16
Reference clock ID: none
Clock jitter: 0.000000 s
Stability: 0.000 pps
Clock precision: 2^-17
Root delay: 0.00000 ms
Root dispersion: 17.91382 ms
Reference time: 00000000.00000000 Thu, Feb 7 2036 8:28:16.000
How should I preceed with this? Does anyone know if the time given from the country zone is just a closer server, or will the time it gives my switch be the local time for that zone?
What command must I use to make the switch act as NPT server?
- Tags:
- NTP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
05-27-2014 10:28 AM
05-27-2014 10:28 AM
Re: NTP and the 5900 switch
Hi meteorx,
To hopefully answer your questions:
- NTP uses UTC for all synchronization; so you don't have to worry about your switch's time zone or that of its peers to configure NTP. Use ntp-service unicast-server to configure your NTP sources. You should always use at least 3 servers.
- Best practice is to set your time zone to UTC if you administer systems in multiple time zones. If all of your systems are in the same time zone and always will be, there is no point in following this, and it's best to use your local time zone. Use clock timezone to set the correct time zone.
- If NTP is working properly and you have set your time zone properly, display ntp-service sessions should show that you are synced with a server and have low offsets from your peers (within 50-100 ms is usually good enough if you're not a timing-sensitive site).
- If NTP is working properly and you've set your time zone properly, display clock should show your local time. If not, check the documentation or your switch CLI help to make sure you've got your clock timezone syntax right.
Hope that helps.
Paul
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-06-2014 05:59 AM
06-06-2014 05:59 AM
Re: NTP and the 5900 switch
This is how I do NTP on a 5820 unit:
acl number 2001 name v4-MGMT-NTP
hardware-count enable
rule 0 permit source <SERVER1> 0
rule 5 permit source <SERVER2> 0
rule 15 deny
acl ipv6 number 2001 name v6-MGMT-NTP
hardware-count enable
rule 0 deny
ntp-service source-interface LoopBack0
ntp-service access peer 2001
ntp-service access server 2000
ntp-service access synchronization 2000
ntp-service access query 2000
ntp-service unicast-server <SERVER1>
ntp-service unicast-server <SERVER2>
In the above example I only use v4 NTP servers to sync against and dont let any NTP clients to sync against my 5820 (the clients will have to sync themselfs with the NTP servers directly in this case). Also you need to replace <SERVER1> and <SERVER2> to whatever NTP servers you prefer yourselfs (or add many more, in my current setup I have 6 NTP servers configured to sync against).
Also dont forget the IPv6 ACL... specially nowadays when NTP can be used as a reflector attack and be part of DDoS-attacks against others on the Internet.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
08-15-2014 04:16 AM
08-15-2014 04:16 AM
Re: NTP and the 5900 switch
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
08-15-2014 05:06 AM
08-15-2014 05:06 AM
Re: NTP and the 5900 switch
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
05-29-2019 08:12 PM
05-29-2019 08:12 PM
Re: NTP and the 5900 switch
We recently had a power outage in one of our site, but after the power come back up the switches, routers and all network devices lost ntp sync after I added the static up rout and configured the ntp from the scratch but the ntp is stuck init status. How can I fix it please
- Tags:
- Ntp server
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2 weeks ago
2 weeks ago
Re: NTP and the 5900 switch
I am looking to disable this, as you have suggested, but in your example, you reference acl 2001, which you give an example for, and 2000 which you do not give an example for.
-Should these all reference the same ACL?
-also will the router check both the ipv6 and ipv4 version of the ACL, or just know which it should reference based upon the source address?
I hope you have time to reply,
Thank you
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP