On Sat, 2013-08-31 at 08:35 +0100, Phil Mayers wrote:
> In essence - yes, IOS will establish peer relationships with random 
> hosts unless you ACL it off. Yes that is crazy.

And on top of "ntp access-group" maybe also include "ntp disable" on
every customer facing interface, just to use both suspenders and a belt.

I concur, the IOS default is crazy.

-- 
Peter

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to