Detections
Analytics
2.2 NTP Security Protection - c) NTP Auth-key MD5 or Keychain
Information
From the perspective of security, the equipment should support the NTP clock synchronization protocol to ensure that all the equipment in the network have the same clock and that the log timestamps are correct. ZTE Router Platform supports the NTP protocol.In addition, in order to ensure the security of the NTP protocol, it supports ACL filtering to limit NTP packets that enter the IP network device from the external network, and allows MD5 and keychain authentication on NTP sessions.
Solution
It is recommended to config NTP for clock synchronization, and also set the ipv4-access-list filtering rules and authentication key.ZXR10#config terminal
ZXR10 (config)#ntp authenticate
Enable Keychain authentication:
ZXR10 (config)#ntp authentication-key 1 keychain zte
ZXR10 (config)#ntp trusted-key 1
Enable MD5 authentication:
ZXR10 (config)#ntp authentication-key 1 md5 clear xxxxxxx
ZXR10 (config)#ntp trusted-key 2
See Also
Item Details
Audit Name: Tenable ZTE ROSNG Best Practices
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-8
Plugin: ZTE_ROSNG
Control ID: fca0aa9ffe9c82864ccd4002b087ee0b16e7af16012de713ce35a66f64893d7f