Arista EOS
TMA-ARISTA-EOS-1.1.4
Network Time Protocol
Description
EOS enables Network Time Protocol (ntp) on the switch by default, and time settings from any properly configured ntp server override the manual setting of the system clock. ntp servers synchronize time settings of systems running an ntp client. The switch supports ntp versions 1 through 4, and uses version 4 by default. Without synchronized time accurately correlating information between devices becomes difficult, if not impossible. If logs cannot be successfully compared between each of the routers, switches, and firewalls, it will be very difficult to determine the exact ... Audited against the output of 'show running-config' (not 'show running-config all').
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^ntp server (?:vrf \S+ )?\S+
How it is fixed
Fix method: Guidance or infrastructure patch
! Configure one or more NTP servers. NTP should be provided via the management network. ntp server vrf {management vrf} {Hostname|IPaddr} prefer ntp server vrf {management vrf} {Hostname|IPaddr}
Properties
- Operating systems
- Any
- Tags
- arista-eosnetworkntp
- Reference
- CIS Arista EOS Benchmark v1.0.0 - 1.1.4 Network Time Protocol
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target arista-eos