Configure the device as an NTP server

Required Configuration Items

Additional Configuration Options

To configure the Connect IT 16/48 device's NTP service:


  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Services > NTP.
  4. Enable the Connect IT 16/48 device's NTP service by clicking Enable.
    • To limit access to specified IPv4 addresses and networks:
      1. Click IPv4 Addresses.
      2. For Add Address, click .
      3. For Address, enter the IPv4 address or network that can access the device's NTP service. Allowed values are:
        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 192.168.1.0/24.
        • any: No limit to IPv4 addresses that can access the NTP service.
      4. Click again to list additional IP addresses or networks.
    • To limit access to specified IPv6 addresses and networks:
      1. Click IPv6 Addresses.
      2. For Add Address, click .
      3. For Address, enter the IPv6 address or network that can access the device's NTP service. Allowed values are:
        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 2001:db8::/48.
        • any: No limit to IPv6 addresses that can access the NTP service.
      4. Click again to list additional IP addresses or networks.
    • To limit access to hosts connected through a specified interface on the device:
      1. Click Interfaces.
      2. For Add Interface, click .
      3. For Interface, select the appropriate interface from the dropdown.
      4. Click again to allow access through additional interfaces.
    • To limit access based on firewall zones:
      1. Click Zones. By default, there are three firewall zones already configured: Internal, Edge, and IPsec.
      2. For Add Zone, click .
      3. For Zone, select the appropriate firewall zone from the dropdown.

        See Firewall configuration for information about firewall zones.

      4. Click again to allow access through additional firewall zones.

    Note By default, the access control list for the NTP service is empty, which means that all downstream hosts connected to the Connect IT 16/48 device can use the NTP service.

  6. Enable Fall back to local clock to allow the device's local system clock to be used as backup time source.
    • To change the default value of the NTP server:
      1. Click NTP servers.
      2. For Server, type a new server name.
    • To add an NTP server:
      1. Click NTP servers.
      2. For Add Server, click .
      3. For Server, enter the hostname of the upstream NTP server that the device will use to synchronize its time.
      4. Click to add additional NTP servers. If multiple servers are included, servers are tried in the order listed until one succeeds.

    Note This list is synchronized with the list of servers included with NTP client configuration, and changes made to one will be reflected in the other. See Configure the system time synchronization for more information about NTP client configuration.

    1. Click System > Time
    2. Select the Timezone for the location of your Connect IT 16/48 device.
  9. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect IT 16/48 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Enable the ntp service:
    (config)> service ntp enable true
(config)>
    • To delete the default NTP server, time.devicecloud.com:
      (config)> del service ntp server 0
(config)>
    • To add the NTP server to the beginning of the list, use the index value of 0 to indicate that it should be added as the first server:
      (config)> add service ntp server 0 time.server.com
(config)>
    • To add the NTP server to the end of the list, use the index keyword end:
      (config)> add service ntp server end time.server.com
(config)>
    • To add the NTP server in another location in the list, use an index value to indicate the appropriate position. For example:
      (config)> add service ntp server 1 time.server.com
(config)>

    Note This list is synchronized with the list of servers included with NTP client configuration, and changes made to one will be reflected in the other. See Configure the system time synchronization for more information about NTP client configuration.

  5. Allow the device's local system clock to be used as backup time source:
    (config)> service ntp local true
(config)>
    • To limit access to specified IPv4 addresses and networks:
      (config)> add service ntp acl address end value
(config)>

      Where value can be:

      • A single IP address or host name.
      • A network designation in CIDR notation, for example, 192.168.1.0/24.
      • any: No limit to IPv4 addresses that can access the NTP server agent.

      Repeat this step to list additional IP addresses or networks.

    • To limit access to specified IPv6 addresses and networks:
      (config)> add service ntp acl address6 end value
(config)>

      Where value can be:

      • A single IP address or host name.
      • A network designation in CIDR notation, for example, 2001:db8::/48.
      • any: No limit to IPv6 addresses that can access the NTP server agent.

      Repeat this step to list additional IP addresses or networks.

    • To limit access to hosts connected through a specified interface on the Connect IT 16/48 device:
      (config)> add service ntp acl interface end value
(config)>

      Where value is an interface defined on your device.

      Use ... network interface ? to display interface information:

      (config)> ... network interface ?

Interfaces

 Additional Configuration
 -------------------------------------------
 setupip                 Setup IP
 setuplinklocalip          Setup Link-local IP
 eth1                      ETH1
 eth2                      ETH2
 loopback                  Loopback
 sfp1                      SFP1
 sfp2                      SFP2
 wwan                      WWAN
(config)>

      Repeat this step to list additional interfaces.

    • To limit access based on firewall zones:
      (config)> add service ntp acl zone end value
(config)>

      Where value is a firewall zone defined on your device, or the any keyword.

      Type ... firewall zone ? at the config prompt:

      (config)> ... firewall zone ?

Zones: A list of groups of network interfaces that can be referred to by packet
filtering rules and access control lists.

 Additional Configuration
 -------------------------------------------------------------------------------
  any
  dynamic_routes
  edge
  external
  internal
  ipsec
  loopback
  setup

(config)>

      Repeat this step to include additional firewall zones.

    Note By default, the access control list for the NTP service is empty, which means that all downstream hosts connected to the Connect IT 16/48 device can use the NTP service.

  7. (config)> system time timezone value
(config)>

    Where value is the timezone using the format specified with the following command:

    (config)> system time timezone ?

Timezone: The timezone for the location of this device. This is used to adjust the time for log
messages. It also affects actions that occur at a specific time of day.
Format:
  Africa/Abidjan
  Africa/Accra
  Africa/Addis_Ababa
  ...

(config)>

  8. Save the configuration and apply the change.
    (config)> save
Configuration saved.
>
  9. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.