It’s Good to be on Time

[LEFT][CODE]http://www.nil.com/ipcorner/BeOnTime/[/CODE]


The importance of having accurate time on distributed servers (and even personal workstations) has been recognized long time ago by the IT managers, but it hasn’t been applied consistently to the networking devices. In this article, I’ll describe the importance of time synchronization for networking devices, the basics of Network Time Protocol (NTP) that is commonly used to synchronize IP hosts and routers, how to use it on Cisco routers and IOS-based switches and how to implement it in a highly scalable way.
[B]
The Need for Accurate Time[/B]

Years ago, the only environment where people would care about accurate time on their networking gear would be academic environments (in many cases simply because it’s fun having very precise time on the device that should do nothing more than forward IP packets), but the introduction of encryption-based Virtual Private Networks (VPNs) implemented with IPSec and the [URL="http://en.wikipedia.org/wiki/X.509"]public key infrastructure (PKI) based on X.509 certificates[/URL] required that all certificate users (including routers and VPN concentrators) have approximately correct time (all X.509 certificates have embedded timestamps defining certificates’ validity). This requirement was easily met on high-end routers that have internal real-time clock backed up with a battery. The low-end routers (for example, the 800-series routers) are a different story; unless you synchronize them to an external time source after the reload, they will not establish a VPN tunnel.
The PKI certificates require time that is accurate to a few hours. On the other hand, if you want to perform a distributed analysis of events happening in your network (for example, break-ins, denial-of-service attacks or routing instabilities) or correlate logging printouts [URL="http://ioshints.blogspot.com/2007/09/logging-to-flash-disk.html"]stored locally on various devices[/URL], the devices participating in the analysis have to be almost perfectly synchronized.

[B]Don’t Forget[/B]
Even if you have the most accurate time on your routers, it won’t be very helpful unless you use it in syslog messages (configured with the [URL="http://www.cisco.com/en/US/docs/ios/12_3/configfun/command/reference/cfr_1g07.html"]service timestamps[/URL] global configuration command).
Last but not least, if you decide to offload various network services to routers, you could use them as local NTP servers (together with being DHCP- and [URL="http://ioshints.blogspot.com/2006/08/using-router-as-dns-proxy-server.html"]DNS proxy servers[/URL]).

[B]NTP Basics[/B]

The Network Time Protocol (NTP, [URL="http://tools.ietf.org/html/rfc1305"]RFC 1305[/URL]) is a simple protocol using UDP port 123. The RFC describes the protocol itself as well as the architectural framework and in-depth implementation recommendations.
The NTP architectural framework specifies a hierarchy of time servers using [I]stratum[/I] values from one to sixteento indicate their relative accuracy. The most accurate servers using external clocks (GPS receivers are commonly used due to their low cost) are [I]stratum one [/I]servers and any server synchronizing itself to a [I]stratum X [/I]server advertises itself as [I]stratum X+1 [/I]server.

Two NTP servers communicate in client-server or peer-to-peer mode (the desired peering mode is configured manually on the servers and indicated in the outgoing NTP packets). The fundamental difference is the synchronization behavior: an NTP server can synchronize to a peer with better stratum, whereas it will never synchronize to its client (regardless of the client’s stratum).

The upstream NTP [I]servers[/I] have to be defined manually in the [I]client[/I] NTP server (or the NTP client); there is no auto-discovery mechanism in the client-server relationships. If you use NTP on the Cisco IOS, the NTP peers have to be defined only on one side; the IOS implementation of the NTP server automatically creates a peer-to-peer association when it receives an incoming NTP packet indicating the remote IP host wants to establish a peering relationship.

[B]Warning[/B]
This behavior is a potential threat in security-conscious environments that can easily lead to denial-of-service attacks. It’s thus highly recommended that you protect the IOS NTP servers with NTP authentication or access lists; both mechanisms will be described in an upcoming IP Corner article.
NTP clients are no different from the NTP servers (from the protocol or implementation perspective). The typical NTP client implementations can synchronize to multiple NTP servers, select the best server and synchronize with it or even set the local clock to the averaged value returned by the servers.
Low-end time synchronization implementations (for example, Windows 2000) typically choose to use Simple Network Time Protocol (SNTP) [URL="http://www3.tools.ietf.org/html/rfc4330"]defined in RFC 4330[/URL]. SNTP is a small subset of NTP. It interoperates with NTPv3 servers (there is no need to deploy another time synchronization infrastructure to use SNTP) but forgoes the complex time synchronization algorithms of RFC 1305 and replaces them with a simple stateless request-reply protocol, resulting in lower accuracy.

[B]Technical Details[/B]
Some low-end Cisco routers support only SNTP client. Mid-range routers can be configured to use either NTP or SNTP. If you want to use a router as an NTP server, it has to synchronize with upstream routers via NTP; if you only need pretty accurate local time, SNTP is a good choice for remote locations.

[B]Design Guidelines[/B]

Typical NTP design guidelines recommend that every NTP server uses at least two upstream servers and peers with at least one more server of the same stratum. Of course, these recommendations have to be tailored to the actual network design. For example, if you have remote sites with a single router, it makes no sense for the router to peer with anyone but the upstream routers (or central NTP servers); if the upstream connectivity is gone, it has no reasonable peers anyway (Figure 1).

Figure 1
NTP sessions on a non-redundant site

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/NonRedundantSite.jpg[/IMG]

On the other hand, if you have a redundant network design that has two routers on each remote site, it’s advisable that you configure them as NTP peers; even if one of them loses upstream connectivity, it can still synchronize to the other one (Figure 2).

Figure 2
NTP sessions on a redundant remote site

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/RedundantSite.jpg[/IMG]

The NTP protocol uses little bandwidth and CPU resources on the routers. A Cisco router sends only a few NTP packets after the reload, trying to achieve fast synchronization with the upstream NTP servers and peers. After the initial synchronization attempt, NTP packets are sent every 64 seconds to unstable peers or newly configured servers. This interval is gradually increased until the packets are sent every 1024 seconds in the steady-state conditions. It’s therefore totally harmless to implement NTP topology that follows the actual physical topology of your network. The proposed NTP topology in a typical hierarchical network design is shown in Figure 3.

Figure 3
NTP sessions in a typical hierarchical network

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/ThreeTierDiagram.jpg[/IMG]

If you want to have a robust distributed NTP architecture in your network, you should allow every NTP server to use its own local clock as one of the time sources ensuring that it will continue to serve meaningful time to its client even if it loses connectivity to all upstream servers and peers. The stratum of the local clock should be set to the worst possible stratum of all the upstream servers increased by one, as shown in Figure 4 (setting strata of local clocks to lower values might prevent time synchronization if the central NTP server fails).

Figure 4
Strata of local clocks in a multi-level NTP network

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/StratumStructure.jpg[/IMG]

[B]Warning[/B]
If you want to set the stratum of router’s local clock to X, you should configure the router to be stratum X+1server with the [B]ntp[/B][B] master[/B] configuration command.

[B]NTP Configuration on Cisco IOS[/B]

NTP configuration in Cisco IOS uses global configuration commands that start with the keyword [B]ntp[/B][B]. [/B]The upstream NTP servers in Cisco IOS are defined with the [B]ntp[/B][B] server [/B][B][I]ip[/I][/B][B][I]-address [/I][/B]configuration command and the peers are defined with the [B]ntp[/B][B] peer [/B][B][I]ip[/I][/B][B][I]-address[/I][/B] configuration command.

[B]Note[/B]
The router’s behavior will not change if you define all neighboring servers with the [B]ntp[/B][B] peer [/B]configuration commands, but since the router will send out NTP packets indicating peer-to-peer mode, an unprotected upstream server could decide to synchronize to them.

Once the router synchronizes with its NTP neighbors, it will insert the [B]ntp[/B][B] clock-period [/B][B][I]some-number[/I][/B] command in the running configuration. This command specifies an estimate of the actual frequency of the local clock (the internal router’s clock is believed to be highly precise, but not necessarily running at the correct frequency). Don’t change it and make sure it’s stored in the NVRAM after the router’s time synchronization reaches steady state (upstream NTP servers are polled every 1024 seconds).

It’s highly recommended that you track the status of your time synchronization with [I]syslog[/I]commands; the [B]ntp[/B][B] logging [/B]command is available in IOS releases 12.3T and 12.4. Some people [URL="http://ioshints.blogspot.com/2007/10/log-ntp-events.html"]complain that it generates too much output[/URL], but the repeating messages about NTP synchronization loss and subsequent resynchronization usually indicate a real problem somewhere in your network:
The [B]ntp[/B][B] clock-period [/B]command could be a bad estimate of the drift of the router’s internal clock;
The NTP server is intermittently unreachable;
The NTP server is heavily loaded and does not respond to NTP queries;

[B]Technical Detail[/B]
A heavily-loaded router is not the best choice for an authoritative NTP server in your network. The replies to the incoming NTP requests are sent from the [I]NTP[/I] process, which is a medium-priority process in Cisco IOS. All packet switching activities as well as high-priority processes will be executed before the router is able to reply to an NTP request. In most UNIX implementations (including Linux) you could [URL="http://www.cis.udel.edu/%7Emills/ntp/html/kern.html"]run the NTP processing in the kernel[/URL] to get microsecond-level accuracy.

If you use access lists to protect your NTP server, you should ensure that the NTP packets sent by a router are always sent from the same IP address (usually from the router’s loopback interface). To specify the source IP address globally, use the [B]ntp[/B][B] source [/B][B][I]interface[/I][/B] configuration command. To specify the source IP address for a specific NTP peer or upstream server, use the [B]ntp[/B][B]peer|server[/B][B][I]ip[/I][/B][B][I]-address [/I][/B][B]source [/B][B][I]interface [/I][/B]configuration command.

If you’re concerned about the memory consumption of a core NTP server, you can limit the number of associations it supports with the [B]ntp[/B][B] max-associations [/B][B][I]number[/I][/B] configuration command.
And finally, a router will not be able to act as a standalone NTP server (in case all upstream servers and peers are lost) unless you:

Store the NTP-synchronized time value in the internal battery backed-up clock with the [B]ntp[/B][B] update-calendar [/B]configuration command;

Configure the router to become a stratum X server with the [B]ntp[/B][B] master [/B][B][I]stratum[/I][/B]configuration command. The [I]stratum [/I]value you use in the [B]ntp[/B][B] master [/B]configuration command should be at least the maximum possible stratum value of all upstream NTP servers increased by two.

To configure the NTP server on a remote site S1 router from Figure 5 you could use the configuration commands in Listing 1 that:

Configure the central server (NTP Server) and the upstream router (C1) to be NTP servers;
Configure the redundant router (S2) on the same remote site to be NTP peer;
Configure the router to act as a standalone NTP server with stratum 10;
Specify that the NTP packets toward the NTP servers should be sent with the source address of the Loopback interface whereas the NTP synchronization with S2 should use the IP address of the Fast Ethernet interface;
Perform periodic updates of the internal clock.

Figure 5
Sample network using NTP synchronization

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/SampleNTPConfig.jpg[/IMG]

[B]Listing 1 NTP configuration on S1[/B]

[CODE]ntp logging
ntp source Loopback0
ntp master 10
ntp update-calendar
ntp server NTP-Server
ntp peer S2 source FastEthernet0/0
ntp server C1
[/CODE]

[B]Note[/B]
The hostnames used in the [B]ntp[/B][B] server [/B]and [B]ntp[/B][B] peer [/B]commands are resolved immediately and stored as IP addresses.

[B]Monitoring NTP[/B]

Cisco IOS provides two commands to monitor the status of the embedded NTP server. The [B]show [/B][B]ntp[/B][B] status [/B]command displays the state of the internal clock (Listing 2). This printout indicates the synchronization status, the stratum of the local NTP server, the internal clock frequency, the current time (reference time) and the offset and dispersion to the NTP server to which the router has synchronized (the mentioned fields are highlighted in Listing 2).

[B]Listing 2 Time synchronization status on S1[/B]

[CODE]S1#show ntp status
Clock is synchronized, stratum 7, reference is 10.0.0.10
nominal freq is 250.0000 Hz, actual freq is 250.0005 Hz, precision is 2**18
reference time is CB6D3483.720B1C23 (12:35:15.445 UTC Mon Feb 25 2008)
clock offset is 0.7809 msec, root delay is 1.51 msec
root dispersion is 41.38 msec, peer dispersion is 29.30 msec

[/CODE]

[B]Note[/B]
When the synchronization process with an upstream server reachable over high-speed links has completed, the clock offset and the dispersion should both be not more than 100 milliseconds.
The [B]show [/B][B]ntp[/B][B] associations [/B]command displays all configured and dynamically acquired NTP servers and peers, their stratum values, reference clocks (IP addresses of the upstream NTP servers), polling intervals, reachability information, delays and offsets (Listing 3).
[B]
Listing 3 NTP associations on S1[/B]

[CODE]S1#show ntp associations
address ref clock st when poll reach delay offset disp
+~10.0.0.5 10.0.0.10 4 33 512 377 45.9 18.60 4.1
~192.168.0.6 0.0.0.0 16 - 1024 0 0.0 0.00 6000.
~127.127.7.1 127.127.7.1 9 22 64 377 0.0 0.00 0.0
*~10.0.0.10 127.127.1.0 3 436 512 377 45.6 -22.51 6.0
* master (synced), # master (unsynced), + selected, - candidate, ~ configured

[/CODE]

A single NTP neighbor is selected as the NTP master. If the local clock is synchronized to the NTP master, its status is [I]master (synced[/I]), otherwise it’s [I]master ([/I][I]unsynced[/I][I]). [/I]Other NTP neighbors could be [I]selected [/I]for potential synchronization should the current master fail or be [I]candidates [/I]for synchronization.
In-depth NTP association information can be displayed with the [URL="http://www.cisco.com/en/US/docs/ios/12_3/configfun/command/reference/cfr_1g09.html"][B]show [/B][B]ntp[/B][B] associations detail[/B][/URL]command. Unfortunately, this command does not accept the IP address of the NTP neighbor; the only means of reducing its output is to use the output filters as illustrated in Listing 4.
[B]
Listing 4 Detail of NTP association between S2 and NTP server 10.0.0.5[/B]

[CODE]S1#show ntp associations detail | begin ^10.0.0.5
10.0.0.5 configured, selected, sane, valid, stratum 4
ref ID 10.0.0.10, time CB6D36DE.B61F1589 (12:45:18.711 UTC Mon Feb 25 2008)
our mode active, peer mode active, our poll intvl 256, peer poll intvl 256
root delay 2.55 msec, root disp 53.92, reach 276, sync dist 59.280
delay 0.66 msec, offset -7.9848 msec, dispersion 2.87
precision 2**18, version 3
org time CB6D3716.B5B90617 (12:46:14.709 UTC Mon Feb 25 2008)
rcv time CB6D3716.B7DA45D6 (12:46:14.718 UTC Mon Feb 25 2008)
xmt time CB6D375F.710E25CA (12:47:27.441 UTC Mon Feb 25 2008)
filtdelay = 0.66 1.80 -0.34 2.30 1.98 2.49 6.68 12.79
filtoffset = -7.98 -8.56 -10.49 -12.60 -11.89 -10.21 -4.59 13.11
filterror = 0.85 2.81 4.76 6.71 7.69 9.09 10.07 11.05
10.0.0.10 configured, our_master, sane, valid, stratum 3
ref ID 127.127.1.0, time CB6D36E7.BDA843E2 (12:45:27.740 UTC Mon Feb 25 2008)
… rest of printout deleted …

[/CODE]

[B]SNTP Configuration[/B]

The SNTP configuration in Cisco IOS is (as one would expect) much simpler than the NTP configuration:
You can configure the SNTP-related logging with the [B]sntp[/B][B] logging [/B]configuration command;
Upstream NTP server is configured with the [B]sntp[/B][B] server [/B][B][I]ip[/I][/B][B][I]-address [/I][/B]configuration command. You can configure multiple servers for redundancy purposes.

[B]Note[/B]
You cannot configure the SNTP process to update the internal clock, as SNTP is supposed to be used solely on the low-end models with no battery backed-up clock.

The SNTP process will not synchronize to the configured SNTP servers if you’ve previously entered any NTP-related configuration commands on the router ([B]ntp[/B][B] logging [/B]is enough), as the [I]NTP[/I] process in Cisco IOS receives replies that should be received by the [I]SNTP[/I] process (remember: NTP and SNTP use the same UDP port number). The only way to fix this problem is to reload the router.

[B]Warning[/B]
A router using SNTP synchronization cannot be used to provide NTP services to downstream clients, as these services would require the NTP process to run, thus blocking the SNTP synchronization.
If you want to configure SNTP on the Site router in Figure 6, you could use the configuration commands displayed in Listing 5.

Figure 6
Simple remote site using SNTP synchronization

[IMG]http://www.nil.com/ipcorner/BeOnTime/$FILE/NonRedundantSite.jpg[/IMG]

[B]Listing 5 Caption[/B]

[CODE]sntp logging
sntp server C1
sntp server C2
sntp server NTP-Server[/CODE]

The SNTP process should quickly acquire the correct time from the NTP servers and generate [I]syslog[/I] messages as it synchronizes with the servers (Listing 6). Multiple synchronizations might occur if the SNTP process reaches a high-stratum NTP server before a low-stratum one.
[B]
Listing 6 SNTP synchronizations on the Site router[/B]

[CODE]00:00:56: %SYS-6-CLOCKUPDATE: System clock has been updated from 14:09:51 UTC Mon Feb 25 2008 to
13:29:59 UTC Mon Feb 25 2008, configured from SNTP by 10.0.0.5.
00:01:59: %SYS-6-CLOCKUPDATE: System clock has been updated from 13:31:02 UTC Mon Feb 25 2008 to
13:31:02 UTC Mon Feb 25 2008, configured from SNTP by 10.0.0.10[/CODE]

The [B]show [/B][B]sntp[/B]command can be used to display the current synchronization status (Listing 7).
[B]
Listing 7 SNTP status on the Site router[/B]

[CODE]Site#showsntp
SNTP server Stratum Version Last Receive
10.0.0.5 7 1 00:00:56
10.0.0.10 6 1 00:01:03 Synced
10.0.0.6 7 1 00:00:15
[/CODE]

[B]Summary[/B]

Having accurate time on the network devices is very important if you use public key infrastructure (where the time is needed to check the certificate validity) or if you want to perform a distributed analysis of a security incident or a routing problem.

Cisco IOS devices (router and switches) can be configured to use the Network Time Protocol (NTP) to synchronize with a reliable time source. They can also act as NTP servers allowing you to build a hierarchical time synchronization infrastructure. Any NTP client can synchronize with a router providing NTP services; you can thus minimize the impact of workstations’ time synchronization from remote sites and increase the time accuracy on these sites by providing the time services locally.

Low-end routers that do not support NTP can be configured to use SNTP (a stripped-down version of NTP that provides only the basic client functionality). SNTP client can also be configured on some mid-range routers (even if they support NTP) in the recent IOS releases.
[B]
Related learning products:[/B]

[URL="http://www.nil.com/ls/ISCW10"]Implementing Secure Converged Wide Area Networks Course[/URL]
[URL="http://www.nil.com/ls/LB_RL_ISCW10t"]Implementing Secure Converged Wide Area Networks Remote Labs[/URL]
[URL="http://www.nil.com/ls/BS_ISCW10"]Implementing Secure Converged Wide Area Networks E-course[/URL]
[B]More to explore:[/B]

[URL="http://ioshints.blogspot.com/2007/09/logging-to-flash-disk.html"]Logging to a local file system[/URL]
RFC 1305 (NTP) in PDF format: [URL="http://www.cis.udel.edu/%7Emills/database/rfc/rfc1305/rfc1305a.pdf"]abstract and table-of-contents[/URL], [URL="http://www.cis.udel.edu/%7Emills/database/rfc/rfc1305/rfc1305b.pdf"]RFC contents[/URL], [URL="http://www.cis.udel.edu/%7Emills/database/rfc/rfc1305/rfc1305c.pdf"]appendices[/URL]
[URL="http://www3.tools.ietf.org/html/rfc4330"]Simple Network Time Protocol (RFC 4330)[/URL]
[URL="http://ioshints.blogspot.com/2007/10/log-ntp-events.html"]Pros and cons of using NTP logging[/URL]
[URL="http://ioshints.blogspot.com/search/label/NTP"]More NTP-related hints[/URL]
[/LEFT]

ولي پاتريس جان آخر ما سر سوييچهامون به نتيجه نرسيديما
ntp اونها با AD سينك نميشه
نرم افزارهاي جانبي هم كمك خاصي نكرد
به اينترنت هم كه وصل نيستيم
فكر كنم آخر بايد بريم time server بخريم نه ؟

سلام
از نرم افزار Absolute Time Server استفاده کنید.

[QUOTE=aliafzalan;257313]سلام
از نرم افزار Absolute Time Server استفاده کنید.[/QUOTE]
سلام
با سوييچها هم كار ميكنه ؟
كافيه يه جا نصبش كنم و به بقيه (سرورها و سوييچها) آدرس اون رو به عنوان ntp بدم ؟
تو عكساش كه نگاه ميكنم ظاهرا خودش هم يه جورايي كلاينته !!! و آدرس سرورهاي ديگه رو ميخواد براي sync كردن
مشكل من رو كه ميدونيد ؟ ميخوام سوييچهام با يه جا سينك بشن ! با اكتيو دايركتوري كه نميشه چون ظاهرا پروتكل ها فرق ميكنه !

ضمنا من فقط همين لينك رو تونستم پيدا كنم كه اينم پسوردش رو پيدا نكردم
[URL="http://rapidshare.com/files/374643343/absolute-time-server-6-1-730_incl_crack.zip"]RapidShare: 1-CLICK Web hosting - Easy Filehosting[/URL]

سلام
با روتر 2800 تست کردم کار میکنه البته نسخه کرک شدش رو دارم. جایی نیاز به تنظیم کلاینت نداره!
البته شما که این رو نوشتی رفتم توی سایتش و عکس هاش رو که نگاه کردم دیدم تنظیمات مربوط به کلاینت هم داره (احتمالاً برای اینه که خودش بره اول با اون سرورها sync بشه و بعدش برای بقیه به عنوان سرور عمل کنه).

[QUOTE=aliafzalan;257343]سلام
با روتر 2800 تست کردم کار میکنه البته نسخه کرک شدش رو دارم. جایی نیاز به تنظیم کلاینت نداره!
البته شما که این رو نوشتی رفتم توی سایتش و عکس هاش رو که نگاه کردم دیدم تنظیمات مربوط به کلاینت هم داره (احتمالاً برای اینه که خودش بره اول با اون سرورها sync بشه و بعدش برای بقیه به عنوان سرور عمل کنه).[/QUOTE]

سلام
خوب شما چه كردي ؟
روي يه سرور نصبش كردي (مثلا سرور 1) بعد اكتيو (سرور 2) رو دادي به عنوان تايم سرورش و بعد به روتر هم گفتي برو از سرور 1 بخون ؟؟
راستي كرك شدش رو براي ما هم بذار ديگه

سلام
من که کاره خاصی انجام ندادم، همه زحمات روی دوش نرم افزار بود ! :D
نیازی به Active Directory نداری، خوده نرم افزار همه کارها رو برات انجام میده.
این هم لینک دانلودش:
[url=http://rapidshare.com/files/387961243/Time_Server.rar.html]RapidShare: 1-CLICK Web hosting - Easy Filehosting[/url]

[QUOTE=aliafzalan;257376]سلام
من که کاره خاصی انجام ندادم، همه زحمات روی دوش نرم افزار بود ! :D
نیازی به Active Directory نداری، خوده نرم افزار همه کارها رو برات انجام میده.
این هم لینک دانلودش:
[URL="http://rapidshare.com/files/387961243/Time_Server.rar.html"]RapidShare: 1-CLICK Web hosting - Easy Filehosting[/URL][/QUOTE]

[QUOTE]
سلام
با سوييچها هم كار ميكنه ؟
كافيه يه جا نصبش كنم و به بقيه (سرورها و سوييچها) آدرس اون رو به عنوان ntp بدم ؟
تو عكساش كه نگاه ميكنم ظاهرا خودش هم يه جورايي كلاينته !!! و آدرس سرورهاي ديگه رو ميخواد براي sync كردن
مشكل من رو كه ميدونيد ؟ ميخوام سوييچهام با يه جا سينك بشن ! با اكتيو دايركتوري كه نميشه چون ظاهرا پروتكل ها فرق ميكنه !

ضمنا من فقط همين لينك رو تونستم پيدا كنم كه اينم پسوردش رو پيدا نكردم
[URL="http://rapidshare.com/files/374643343/absolute-time-server-6-1-730_incl_crack.zip"]RapidShare: 1-CLICK Web hosting - Easy Filehosting[/URL]
[/QUOTE]لینکهای دانلود نرم افزار و غیره را در جای مشخص شده قرار دهید [SIZE=3][B]([URL="http://forum.persiannetworks.com/f109.html"]دریافت نرم افزار و کتاب[/URL])[/B][/SIZE] تا دیگران هم بتوانند به راحتی پیدا و استفاده کنند.

قبل از باز کردن پست جدید در قسمت این پست [SIZE=3][B]([URL="http://forum.persiannetworks.com/f109/t31510.html?pagenumber="]قبل از ایجاد پست جدید برای قرار دادن لینک یا طرح درخواست, این پست را بخوانید[/URL]=)[/B][/SIZE] را بخوانید.

لطفن نظم و قانون را رعایت کنید.

بله، درست می فرمایید. ولی بعد از اینکه فایل رو upload کردم نوشته بود فقط 10 بار میشه دانلودش کرد (و اگر تا 60 روز کسی دانلودش نکنه پاک میشه)، من هم با خودم فکر کردم اگر بزارم توی قسمت نرم افزار، فقط مدت کوتاهی فعال خواهد بود و بعدش به یک لینک خراب تبدیل میشه، به همین دلیل اینجا گذاشتم.

[URL]http://forum.persiannetworks.com/f109/t35142.html[/URL]

در سایت [URL="http://www.multiupload.com/"][B]Multiupload.com[/B][/URL] آپلود کنید و تمام سایتهای نشان داده را انتخاب کنید تا در همه آپلود شود..

[url]http://forum.persiannetworks.com/f109/t35141.html#post257386[/url]

[QUOTE=aliafzalan;257376]سلام
من که کاره خاصی انجام ندادم، همه زحمات روی دوش نرم افزار بود ! :D
نیازی به Active Directory نداری، خوده نرم افزار همه کارها رو برات انجام میده.
این هم لینک دانلودش:
[url=http://rapidshare.com/files/387961243/Time_Server.rar.html]RapidShare: 1-CLICK Web hosting - Easy Filehosting[/url][/QUOTE]


[QUOTE]نیازی به Active Directory نداری، خوده نرم افزار همه کارها رو برات انجام میده.[/QUOTE]
نشد . چجوری انجام میده ؟ خودش هم باید با یه جایی سینک بشه دیگه درسته ؟ با یه سیستم با dc با یه سوییچ دیگه با هرچی نمیدونم
ضمنا عرض کردم من اینترنت رو تو شبکه داخلی ندارم که بهش بگم بره با سرورهای اینترنتی خودش رو سینک کنه

پس باید خودش رو با یه سیستم داخل شبکه (ترجیحا DC) سینک کنه و به سوییچ ها هم بگم برن سراغ اون درسته ؟
شما دقیق نگفتید چیکار کردید. این برنامه رو روی یه سیستم نصب کردید و ای پی اون سیستم رو به عنوان ntp server به روتر دادید ؟ با کجا داره سینک میکنه خودش رو ؟

[LEFT][CODE]http://www.adjusttime.com/helponlines/source/client.htm[/CODE]

[B]Time Sources[/B]

You can type the name of a time server if you want to use one that is not listed. Only time servers that use the Simple Network Time Protocol will work.
[CENTER][IMG]http://www.adjusttime.com/helponlines/source/images%202010/ats002.4.jpg[/IMG] [/CENTER]
[B]Synchronization settings[/B]

[CENTER][B][IMG]http://www.adjusttime.com/helponlines/source/images%202010/ats002.5.jpg[/IMG][/B] [/CENTER]
[B]Adjust minutes and seconds only[/B]: If your daylight settings are incorrect, check this option to adjust only minutes and seconds.
[B]Adjust every[/B] option. Set your preferred update interval in the appropriate box.

[/LEFT]

با جایی سینک نمیشه، ساعت خودش ملاک هست. شما برنامه رو نصب میکنی و روی روتر IP سرور رو میدی، همین !

[QUOTE=aliafzalan;257407]با جایی سینک نمیشه، ساعت خودش ملاک هست. شما برنامه رو نصب میکنی و روی روتر IP سرور رو میدی، همین ![/QUOTE]

راستی یه جایی دیدم که میگفت برنامه رو روی خود فلش روتر یا سوییچ نصب میکنید
این کار رو در مورد همچین برنامه هایی میشه انجام داد ؟
یا نه فقط خود cisco sdm این قابلیت رو داره ؟