Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 75

Chapter 4 Initial Configuration Tasks
The NTP master stratum number identifies the server's relative position in the NTP hierarchy. You can
choose a number between 1 and 15. It is not important to the sensor which number you choose.
Configuring the Sensor to Use an NTP Time Source
The sensor requires a consistent time source. We recommend that you use an NTP server. Use the
following procedure to configure the sensor to use the NTP server as its time source.
You must obtain the NTP server IP address, NTP server key ID, and the key value from the NTP server.
Note
For more information, see
To configure the sensor to use an NTP server as its time source, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter configuration mode:
Step 2
sensor# configure terminal
Enter service host mode:
Step 3
sensor(config)# service host
Enter NTP configuration mode:
Step 4
sensor(config-hos)# ntp-option enable
Type the NTP server IP address and key ID:
Step 5
sensor(config-hos-ena)# ntp-servers ip_address key-id key_ID
The key ID is a number between 1 and 65535. This is the key ID that you already set up on the NTP
server. See Step 3 of
Example:
sensor(config-hos-ena)# ntp-servers 10.16.0.0 key-id 100
Type the NTP server's key value:
Step 6
sensor(config-hos-ena)# ntp-keys key_ID md5-key key_value
The key value is text (numeric or character). This is the key value that you already set up on the NTP
server. See Step 3 of
Example:
sensor(config-hos-ena)# ntp-keys 100 md5-key attack
Verify the NTP settings:
Step 7
sensor(config-hos-ena)# show settings
enabled
-----------------------------------------------
78-16527-01
Configuring a Cisco Router to be an NTP Server, page
Configuring a Cisco Router to be an NTP Server, page
Configuring a Cisco Router to be an NTP Server, page
ntp-keys (min: 1, max: 1, current: 1)
-----------------------------------------------
key-id: 100
-----------------------------------------------
md5-key: attack
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Configuring Time
4-28.
4-28.
4-28.
4-29