Note: In order for the NTP process to associate with a server, the switch time must be set to within 15 minutes of the NTP server time. To set switch time: switch(config)# clock datetime YYYY-MM-DD HH:MM:SS switch(config)# clock timezone switch(config)# NTP Client: Configure an NTP time source: switch(config)# ntp server switch(config)# Note: Optional parameters: burst NTP Association use burst mode iburst NTP Association use iburst mode key-id <4-17> NTP Key ID maxpoll <4-17> NTP maximum poll time to use configuration minpoll <4-17> NTP minimum poll time to use configuration prefer NTP Association preference configuration version <3-4> NTP Association version configuration To allow NTP server being set via DHCP option 42: switch(config)# ntp dhcp-enable switch(config)# To specify a VRF for NTP to listen on: switch(config)# ntp vrf To enable NTP: switch(config)# ntp enable Example config of NTP client: switch(config)# clock datetime 2025-06-30 14:22:00 switch(config)# clock timezone americas/los_angeles switch(config)# ntp server 10.10.10.10 iburst minpoll 10 maxpoll 14 prefer switch(config)# ntp server 20.20.20.20 switch(config)# ntp vrf mgmt switch(config)# ntp enable NTP Conductor: Note: - NTP clients and conductor must be enabled together. Configure NTP client first. - NTP conductor MUST be enabled on a vrf other than the vrf of NTP client. Configure an NTP Conductor: switch(config)# ntp conductor stratum <1-15> vrf switch(config)# Example config of and NTP conductor: switch(config)# clock datetime 2025-06-30 14:22:00 switch(config)# clock timezone americas/los_angeles switch(config)# ntp server 10.10.10.10 iburst minpoll 10 maxpoll 14 prefer switch(config)# ntp vrf mgmt switch(config)# ntp conductor stratum 4 vrf default switch(config)# ntp enable Impact: Inaccurate timekeeping between network devices can lead to many undesirable results including: - inability to correlate events between devices, making debugging difficult. - failure of network authentication services, as many require time synchronization to operate. - time-based network attacks that exploit the time settings differences in network devices. - operational and security best practice is to configure more than 1 NTP server

Name	Audit Name	Plugin	Category
1.3.2 Configuring Time Services	CIS HPE Aruba Networking CX Switch v1.0.1 L1	ArubaOS	AUDIT AND ACCOUNTABILITY
1.3.2 Configuring Time Services	CIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations	ArubaOS	AUDIT AND ACCOUNTABILITY

Detections

Analytics

Item Search