2.4.3 Set 'ntp source' to Loopback Interface - 'NTP is bound to loopback'

Information

Use a particular source address in Network Time Protocol (NTP) packets.

Rationale:

Set the source address to be used when sending NTP traffic. This may be required if the NTP servers you peer with filter based on IP address.

Impact:

Organizations should plan and implement network time protocol (NTP) services to establish official time for all enterprise network devices. Setting 'ntp source loopback' enforces the proper IP address for NTP services.

Solution

Bind the NTP service to the loopback interface.

hostname(config)#ntp source loopback {<em>loopback_interface_number}</em>

Default Value:

Source address is determined by the outgoing interface.

See Also

https://workbench.cisecurity.org/files/3762

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-7, 800-53|AU-8, CSCv7|6.1

Plugin: Cisco

Control ID: d3f62a8ed0ad5aace5550b6083e725b39fb93268684f10ccfeaf5ff59708d3c6