+5 votes
388 views
Cisco ASA with NTP

in Routers by (552k points)
reopened | 388 views

1 Answer

+3 votes
Best answer

Introduction

In this case, it is best to cut back and establish a server (physical or virtual, the same applies) that assigns all the devices and devices the same date and time, with distinction of their time zone, of course.

The best part is that in most cases we already have that server. The best option is probably to use our Active Directory. More precisely, the domain controller that executes the PDC emulator role. This server is responsible for synchronizing the date and time to all computers and servers that are added to the domain. That server, the domain controller with the role of PDC Emulator, should in turn be synchronized with an atomic internet clock (we'll see how in another Tutorial).

Cisco ASA / NTP

The process is very simple. We will use the ntp server command with the following parameters:

ntp server ip-address [ex 192.168.1.2] source [interface, ej inside]


In this example, our domain controller uses the IP address 192.168.1.2 and access the server from our firewall with the inside interface.

So the command would be as shown below:


image


We can check the synchronization with our NTP server with the sh running-config ntp command.


image


We will ask date and time to the Firewall with the command sh clock :


image


It is very possible that we see that, apparently, it is correctly synchronized but that in reality the time is not correct. This is due to the time zone that the Firewall has defined.
To solve that we will establish the time zone with the clock timezone command.

Now we can see how both the date and the time is correct. The clock time zone command must be accompanied by the number of hours of difference (backwards or forwards) with respect to the Greenwich Meridian. For example, for Argentina, the corresponding value would be -3.

With this simple steps we would have configured the synchronization of our CISCO ASA 5500 with the NTP service.

Ricardo Quagliano

by (3.5m points)
edited

Related questions

+4 votes
1 answer
+3 votes
1 answer
asked Aug 20, 2019 in Routers by backtothefuture (552k points) | 356 views
+5 votes
1 answer
asked Jun 24, 2019 in Routers by backtothefuture (552k points) | 847 views
+4 votes
1 answer
asked Jun 24, 2019 in Routers by backtothefuture (552k points) | 214 views
+4 votes
1 answer
asked Jun 23, 2019 in Routers by backtothefuture (552k points) | 199 views
Sponsored articles cost $40 per post. You can contact us via Feedback

Most popular questions within the last 30 days

10,659 questions
10,791 answers
510 comments
3 users