2.4.3 Set 'ntp source' to Loopback Interface

Information

Use a particular source address in Network Time Protocol (NTP) packets.

Set the source address to be used when sending NTP traffic. This may be required if the NTP servers you peer with filter based on IP address.

Solution

Bind the NTP service to the loopback interface.

hostname(config)#ntp source loopback {<em>loopback_interface_number}</em>

Impact:

Organizations should plan and implement network time protocol (NTP) services to establish official time for all enterprise network devices. Setting 'ntp source loopback' enforces the proper IP address for NTP services.

See Also

https://workbench.cisecurity.org/benchmarks/17130

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-7, 800-53|AU-8, CSCv7|6.1

Plugin: Cisco

Control ID: 6fae755bea0d9db6172b3a624711609408eb51a20b4f682d96afce2c77d0a851