Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

Synchronize SGM Time (asg_ntp_sync_config)

Description

Use the asg_ntp_sync_config command to synchronize the time for all SGMs and the CMM with an NTP server.

Syntax

asg_ntp_sync_config set primary|secondary <ntp_ip|hostname> [-v <version>] 
[-r <timeout>]

asg_ntp_sync_config {disable|enable|delete}
asg_ntp_sync_config show
asg_ntp_sync_config -h 

Parameter

Description

set

Configure an NTP server

primary

The system uses this NTP server by default

secondary

The system uses this if the primary NTP server is not available

NTP Server <ip|hostname>

NTP server IP address or host name

-v <version>

Server version of the NTP Service (default = NTPv4)

timeout

Timeout in seconds between refreshes (default = 300 seconds).

show

Show NTP Server configuration

disable

Disable NTP service

enable

Enable NTP service

delete

Delete primary or secondary NTP Service

-h

Show syntax and help information

Notes:

  • This command runs ntpdate -u on each SGM and the CMM to synchronize to the local time,
  • If you define a refresh time that is less than the default (300 seconds), refresh occurs every 300 seconds.
  • To allow time synchronization for all SGMs, you must disable the replies_from_any_port property for the NTP over UDP service:
    1. In GuiDBEdit, search for the NTP/UDP service.
    2. Go to the replies_from_any_port property.
    3. Change the property to false.
    4. Install policy.

Validation

  1. Run ‘show time’ on all SGMs and make sure that the time is the same.
  2. Run tcpdump on port 123/UDP for the applicable interface to make sure that all SGMs initiate NTP connections.
 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print