Configure and verify NTP client and server mode

Why NTP is Important

Network Time Protocol (NTP) is critical for network operations because accurate time synchronization ensures:

• Log correlation - Security events and troubleshooting require timestamps to match across devices
• Authentication protocols - Kerberos and certificates rely on synchronized time
• Billing and compliance - Accurate timestamps for regulatory requirements
• Network protocols - Many protocols depend on time-based operations

What is NTP?

NTP is a protocol designed to synchronize clocks across network devices. It operates on UDP port 123 and uses a hierarchical system of time sources called stratum levels.

• Stratum 0 - Atomic clocks, GPS clocks (reference clocks)
• Stratum 1 - Servers connected to Stratum 0 devices
• Stratum 2-15 - Each level synchronized to the stratum above
• Stratum 16 - Unsynchronized (invalid)

The lower the stratum number, the more accurate the time source.

How NTP Works

NTP Client Mode:
The device requests time from an NTP server and adjusts its clock accordingly.

Configuration commands:
Router(config)# ntp server [ip-address]
Router(config)# ntp server 192.168.1.1

NTP Server Mode:
The device provides time to other NTP clients. A router can act as both client and server simultaneously.

To make a device an authoritative NTP server:
Router(config)# ntp master [stratum-number]
Router(config)# ntp master 3

NTP Peer Mode:
Devices synchronize with each other bidirectionally.

Router(config)# ntp peer [ip-address]

Verification Commands

• show ntp status - Displays synchronization status and stratum
• show ntp associations - Shows configured NTP servers and their status
• show clock - Displays current device time
• show clock detail - Shows time source information

Key Symbols in show ntp associations:
• * - Synchronized to this peer (system peer)
• + - Candidate for synchronization
• # - Selected but distance exceeds maximum
• - - Not considered for synchronization

NTP Authentication (Optional Security)

Router(config)# ntp authenticate
Router(config)# ntp authentication-key 1 md5 MySecretKey
Router(config)# ntp trusted-key 1
Router(config)# ntp server 192.168.1.1 key 1


Exam Tips: Answering Questions on Configure and Verify NTP Client and Server Mode

1. Remember the Port: NTP uses UDP port 123 - this is frequently tested.

2. Stratum Numbers: Lower is better. Stratum 1 is more accurate than Stratum 5. Maximum valid stratum is 15.

3. Command Syntax:
• Client configuration uses ntp server
• Server configuration uses ntp master
• Peer configuration uses ntp peer

4. Verification Focus: When asked about verification, show ntp status and show ntp associations are the primary commands.

5. Synchronization Symbol: The asterisk (*) indicates the device is synchronized to that particular time source.

6. Clock Adjustment: NTP gradually adjusts time rather than making sudden changes to prevent disruption.

7. Source Interface: You can specify which interface to use for NTP with ntp source [interface].

8. Common Scenario: If asked why devices show different times, check NTP configuration and synchronization status first.

9. Hierarchy Understanding: A device configured as ntp master 4 will advertise itself as Stratum 4 to clients, who will become Stratum 5.

10. Read Carefully: Distinguish between configuring a device as a client versus configuring it as an authoritative server - the commands are different.