On Saturday, March 22, 2014 04:35:55 PM Drew Weaver wrote: > I just applied an ACL to the ntp command and that fixed > it, but you have to wonder why configuring an IOS device > to synchronize with an external source would explicitly > mean that you also want that IOS device to also be a > clock source itself. > > That seems like a mistake given the current climate we > are in (amp attacks)...
Juniper have the same issue. NTP client configurations turns on NTP server mode as well. Control plane filters are the only way to keep the server side of the implementation inaccessible to anyone. Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
