Modifying Service Point NTP configurations - User Guide - BlueCat Edge

BlueCat Edge User Guide
ft:locale
en-US
Product name
BlueCat Edge

Once you have provisioned a Service Point instance, you can modify the NTP configuration settings to configure a new NTP server, update the list of existing NTP servers, or remove an existing NTP configuration.

You can also configure the Service Point instance to act as an NTP server for select client networks.

To modify NTP configurations on the Service Point instances
  1. Log in to the Edge Cloud Instance.
  2. In the top navigation bar, click and select Service points.
  3. Click the name of a service point. The service point details page appears.
  4. Click Edit.
  5. On the Edit service point page, click NTP service.
  6. Under NTP client, modify the following:
    • Under Select connection type, select one of the following:
      • Unencrypted: the service point uses an unencrypted connection to the NTP server.
      • Encrypted over TLS: the service point uses NTP over TLS (NTS) to securely connect to the NTP server. When selected, upload the Server certificate of the NTP server to secure the connection.
        Attention:
        • NTS service is only supported on Service Point v26.1.0 or greater.
        • The server certificate must be in PEM format.
    • Under NTP servers, add or remove the IP addresses of NTP servers that the service point will use.
      Attention: If you selected Encrypted over TLS:
      • The NTP servers field must be the FQDN of the NTS server.
      • The FQDN for the NTS server must be contained in the server certificate that was uploaded under Server certificate if the certificate is for an internal NTS server.
  7. Under NTP server, modify the following:
    • Select the Server status toggle to enable the NTP server service of the service point.
    • Select one of the following listening options of the NTP server:
      • Listen on all primary (IPv4 and IPv6) addresses: The NTP server service listens on all IPv4 and IPv6 addresses configured on the service point.
      • Listen only on specific addresses: The NTP server service listens on the specified IPv4 and IPv6 addresses configured on the service point. When enabled, select the IP addresses that you would like the service point to listen on.
    • Under Client networks, enter the network CIDR addresses for which the service point will provide NTP service.
      Attention: You cannot configure a client network CIDR address of 0.0.0.0/0. If you could like to allow all internal non-routable networks, add the following network CIDR addresses to the Client networks list:
      • 10.0.0.0/8
      • 172.16.0.0/12
      • 192.168.0.0/16
  8. Click Save to save the NTP configuration changes on the service point.
    Note: BlueCat recommends testing the connection between the service point and NTP servers for reachability, as some networks do not allow NTP traffic by default.