ASA5505 NTP Config

[zekebashi]

Hello, 

We have stand-alone hosts(not on a PDC) behind an ASA 5505 and we would like to configure their clocks to synch up with an external NTP sources. I wasn't sure if I could configure the ASA to use an external NTP sources and then point the hosts to synch up their clocks with the ASA's clock. Is this a good implementation? 

Thanks in advance. 

Best, ~zK 

[Marvin Rhoads · Accepted solution]

The ASA can only act as an NTP client, not as a server.

Just point the hosts to an external NTP server and let them sync. If you have an access-list on your inside interface (restricting outbound traffic from your LAN) then just add a permit statement for ntp (udp/123).

[zekebashi]

Thanks for the reply, Marvin! 

Best, ~zK