Advertisement
ntp
ntp
The Network Time Protocol (NTP) synchronizes the clocks of computers across a network. By
specifying an NTP server, you are instructing the appliance to contact that server to retrieve appropriate
time settings. Synchronized times is especially important to MARS, because timestamp information
provided by the reporting devices (and the appliance itself) is critical to accurate reconstruction of what
transpires on the network.
Time changes on the appliance are immediate, which can affect active incident correlation. If you change
Note
the time by greater than 30 minutes, you should restart your appliance to ensure that all processes
synchronize using the new time.
When operating in a Global Controller/Local Controller hierarchy configuration, you must configure
Warning
NTP on the Global Controller and on each Local Controller to ensure that rules fired by the
Local Controller are properly propagated to the Global Controller.
Use ntp server to identify the primary and secondary NTP server with which the appliance should
synchronize. To force a synchronization with the NTP server, use ntp sync. To disable the use of ntp by
this appliance, use ntp disable.
Syntax Description
noneThe default behavior of this command displays the current settings for the NTP servers. If no servers
have been identified, it displays the message: ntp is not setup.
ntp_server1 Identifies the server, by IP address, that runs the NTP server from which you want this
MARS Appliance to retrieve system time information. This time value sets the clock used to date and
correlate events that are received by the appliance.
ntp syncForces the MARS Appliance to synchronize with the NTP server. If the first server is
unreachable, the appliance attempts to synchronize with the secondary server.
ntp disableDisables the use of NTP on the MARS Appliance.
Examples
To specify that 192.168.101.5 and 192.168.103.21 are your primary and secondary NTP servers,
respectively, enter:
ntp server 192.168.101.5 192.168.103.21
To force a synchronization between the MARS Appliance and the NTP servers you have identified,
enter:
ntp sync
To disable NTP synchronization, enter:
ntp disable
Install and Setup Guide for Cisco Security MARS
A-26
ntp server [ntp_server1] [ntp_server2]
Appendix A
Command Reference
OL-14672-01
Advertisement
Chapters
Troubleshooting
