VRF aware NTP Access-group Control and Authentication

Hi experts,
 

ccielab_at_groupstudy.com
I have the following Scenario:-
 
 
R5(VRF->VPN-A)---------SW1-----------SW2
   |
   |
   |
   |
   R3
R5 sync its time with server 1.1.1.1(ist in Global Routing table).
now we want to R5 acts as NTP server for the systems in Site-1 under VRF
VPN-A, R3,SW1,Sw2
requirementts are as follows:-
1) R5 should sync its time only from 1.1.1.1 and from internal clock
2) R3 and R5 should authenticate each other
2) Sw1 and SW2 sync thier time with R5

below is my config:-

R5#
ntp server 1.1.1.1
ntp master 2
ntp access-group peer 2
ntp access-group serve-only 1
ntp authentication-key 1 md5 cisco
ntp authenticate
ntp trusted-key 1
ntp peer vrf VPN-A 10.10.3.3 key 1

access-list 2 permit 127.127.7.1
access-list 2 permit 1.1.1.1
 
access-list 1 permit 10.10.3.3
access-list 1 permit 10.10.7.7
access-list 1 permit 10.10.8.8

R3
ntp authentication-key 1 md5 cisco
ntp authenticate
ntp trusted-key 1
ntp server 10.10.0.5 key 1
ntp source lo 0
 
Sw1
ntp server 10.10.0.5
ntp source lo 0

SW2
ntp server 10.10.0.5
ntp source lo 0

just wanted to know, if my config are correct or I mised something, all systme
are able to sync clock with R5.
 
Thanks
Imran
 
 

Blogs and organic groups at http://www.ccie.net
Received on Thu Mar 10 2011 - 12:33:57 ART