Hello, I have a 7200 series router that I would like to have sync its time with a public NTP server. Time sync is actually working great. My problem is that when I run a port scanner I see that UDP 123 is in open state.
Here is my config regarding NTP. I would like UDP 123 to be closed. Is there a way to accomplish this?
If you configure NTP on teh router then it's going to open the port so that it'll listen to packets on it. The above config will ensure that if the router receives an NTP packet from anywhere else it'll drop it, but there's no way to actually only open the port for that IP address.
You could apply an inbound ACL on your outside interface that basically says:
that'll ensure no-one else gets in, and would probably close the port off to scan's.
Also, be careful with UDP port scans, they're generally unreliable since there really is no connection in UDP, the port scan usually relies on receiving an ICMP Unreachable back, and if it doesn't it'll assume the port is open. If you have something that silently drops packets (like a PIX), they'll quite often show that every available UDP port is open, when in actual fact they're not.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...