[USG FLEX H Series] - NTP Server

Options
Maverick87
Maverick87 Posts: 59 image  Ally Member
First Comment Friend Collector

Hello everyone,
Is it possible to use the USG Flex H as an NTP server?

This way, I wouldn't need to expose my devices to the internet to synchronize their clocks, but the current time/timezone information would come directly from the firewall, as the only true time source.

Thank you,

All Replies

  • PeterUK
    PeterUK Posts: 4,227 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    Currently does not look like you can best you can do is run a box with OS that can if needed you might need this done on USG.

    edit running
    vrf main ntp maxdistance 16
    commit

    copy running startup
  • Maverick87
    Maverick87 Posts: 59 image  Ally Member
    First Comment Friend Collector

    OK, so you suggest to use an external OS (Raspberry/Linux/Windows) to use as NTP Server?

  • PeterUK
    PeterUK Posts: 4,227 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    Yes I just use windows

  • Zyxel_Tina
    Zyxel_Tina Posts: 399 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers First Comment

    Hi @Maverick87,

    The USG FLEX H series can function as an NTP server for your internal devices. You can configure this via the CLI with the following commands:

    >edit running

    >running config# / vrf main ntp server-subnet <priority> {allow| deny}{CIDR subnet| all}

    >running config# commit

    >running config# copy running startup

    >running config# exit

    Replace CIDR subnet with the specific subnet you want to allow to synchronize with the firewall. You can also use all to permit all subnets to synchronize with this device.

    For example, / vrf main ntp server-subnet 0 allow 192.168.1.0/24 or / vrf main ntp server-subnet 1 allow all

    image.png

    Zyxel Tina