On Sat, 2013-08-31 at 08:35 +0100, Phil Mayers wrote: > In essence - yes, IOS will establish peer relationships with random > hosts unless you ACL it off. Yes that is crazy.
And on top of "ntp access-group" maybe also include "ntp disable" on every customer facing interface, just to use both suspenders and a belt. I concur, the IOS default is crazy. -- Peter _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/