[c-nsp] Use NTP server for syncing but do not respond to NTP requests

Nick Hilliard nick at foobar.org
Sat Mar 22 17:12:24 EDT 2014


On 22/03/2014 17:01, Frank Bulk wrote:
> It's not as good as an access-group, but I've applied "ntp disable" on each
> Vlan interface that I don't want to participate in NTP.  It seems effective.

hadn't noticed that command before.  Yes it seems to work nicely, but only
when applied on the ingress interface of the ntp packets.  I.e. it doesn't
work when you apply it to interface which contains the address that you're
trying to protect.

Nick




More information about the cisco-nsp mailing list