1. Home
  2. Security Hardening
  3. CIS Cisco IOS 16 L2 V1.1.1
  4. Set ‘key’ for each ‘ntp server’

Set ‘key’ for each ‘ntp server’

Details

Specifies the authentication key for NTP.

Rationale:

This authentication feature provides protection against accidentally synchronizing the ntp system to another system that is not trusted, because the other system must know the correct authentication key.

Impact:

Organizations should establish three Network Time Protocol (NTP) hosts to set consistent time across the enterprise. Enabling the ‘ntp server key’ command enforces encrypted authentication between NTP hosts.

Solution

Configure each NTP Server to use a key ring using the following command.

hostname(config)#ntp server {ntp-server_ip_address}{key ntp_key_id}

Default Value:

No NTP key is set by default

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Cisco.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles