Setting up a DMZ server as a NTP Client

[S.J. Sarwar]

I have a rp2470 server running HP-UX 11.11, and it sits behind a Firewall (DMZ Server). I wonder how to configure it as NTP Client.

Kindly help me.

Thanks
Sarwar

[John Waller]

I believe you would just need to make sure that the firewall is setup to allow UDP port 123 through. As it is a NTP client you sould be specifying the server w.x.y.z or server hostname in your /etc/ntp.conf file

[Rick Garland]

Your firewall will need to allow traffic on port 123. Then you can config the /etc/ntp.conf file as apropriate.

[paolo barila]

-stop the daemon for a while if it's running:
# /sbin/init.d/xntpd stop

-verify connection with ntp sever:
# ntpdate -d ip_ntpserver

-initial clock alignment:
# ntpdate ip_ntpserver

-set ip ntp server
# vi /etc/ntp.conf # type one line:

server ip_ntpserver

-start daemon

# /sbin/init.d/xntpd start

-check
# ntpq -p

you should see after a few minutes a * near ntpserver line

-setup daemon autostart at boot

# vi /etc/rc.config.d/netdaemons
...
Export NTPDATE_SERVER=
Export XNTPD=1
Export XNTPD_ARGS=
...

that should be it

Paolo

[rick jones]

Unless you _know_ that the NTP server you've added to the config file is actually multiple servers with failover, you really should configure multiple servers in the /etc/ntp.conf file. In that way, your client can still keep time relatively well synchronized even if one of the time servers becomes unreachable.

It is the same thing with DNS servers in /etc/resolv.conf - there should be more than one configured.

[Tor-Arne Nostdal]

The configuration help already given seems adequate, but here's some input related to NTP server.

Your Network Administrator can probably supply you with an appropriate NTP server address.

In our organisation the net.admins ensure a consistent "network time" within the organisation. This time is again synchronised towards one or more external sources.

Internally our servers will retrieve NTP-time from an internal router.

For external public sources see: http://ntp.isc.org/bin/view/Servers/WebHome

Best regards,
Tor-Arne