On Sat, 2013-08-31 at 08:35 +0100, Phil Mayers wrote: > In essence - yes, IOS will establish peer relationships with random > hosts unless you ACL it off. Yes that is crazy. And on top of "ntp access-group" maybe also include "ntp disable" on every customer facing interface, just to use both suspenders and a belt. I concur, the IOS default is crazy. -- Peter