Tavve zoneranger User Manual page 75

Configuring ZoneRanger to Act as a Secondary NTP Server
The following steps are required to configure ZoneRanger to act as a secondary NTP time server
and can be found on the web interface on the Configuration > System page Time tab:
1. The Time Synchronization Enabled option should be enabled.
2. The Server Type for time synchronization should be set to NTP.
3. If NTP authentication is required, a set of one or more ( index , key ) pairs should be
configured in the NTP Keys table. This set of ( index , key ) pairs may include:
a. Pairs that match the values configured on the NTP servers, as described in part "c" of
b. Additional pairs that managed devices may use when authenticating NTP traffic
4. A list of NTP time servers should be configured in the NTP Servers table. The following
information is required for each entry in the list:
a. The Ranger Gateway through which the ZoneRanger will access the NTP server. The
b. The IP address or hostname of the NTP server.
c. The authentication ( index , key ) to be used when accessing the NTP server. The
5. The ZoneRanger Acts as NTP Server option should be enabled.
6. Optionally, the Authenticate Client Requests option may be enabled.
7. Managed devices should be configured to use the ZoneRanger as their NTP time server. For
high availability, multiple ZoneRangers configured to act as an NTP server can be deployed in
the same network. If the redundant ZoneRangers are configured with the virtual IP address
feature enabled, the configured NTP server list for each managed device can simply include the
virtual IP address. If the virtual IP address feature is not enabled, the configured NTP server list
for each managed device should include the specific address for each NTP-enabled
ZoneRanger.
Configuring ZoneRanger to Act as an NTP Proxy
The following steps are required to configure ZoneRanger to act as an NTP proxy and can be found
on the web interface on the Configuration > Inbound Proxy page NTP tab:
1. The ZoneRanger must be configured not to act as an NTP server. This can be accomplished in a
variety of ways:
a. Time Synchronization on the Configuration > System page Time tab can be disabled.
b. The Server Type for time synchronization can be set to a value other then NTP.
c. The ZoneRanger Acts as NTP Server option can be disabled.
2. A list of NTP time servers should be configured in the Proxy NTP Servers. The following
information is required for each entry in the list:
ZoneRanger 5.5 User's Guide
the following step.
to/from the ZoneRanger.
value "None (direct)" can be specified if the ZoneRanger should access the NTP server
directly.
selected (index, key ) must match the configuration of the specified server. That is,
the set of ( index , key ) pairs configured on the specified server must include the
selected ( index , key ) pair.
75