Shulou(Shulou.com)06/02 Report--

1. Install ntp ntpdate

Yum install-y ntp ntpdate

two。 Modify the configuration file

# backup configuration file cp / etc/ntp.conf / etc/ntp.conf-bak# modify configuration file vi / etc/ntp.conf# configuration file contents are # For more information about this file, see the man pages# ntp.conf (5), ntp_acc (5), ntp_auth (5), ntp_clock (5), ntp_misc (5), ntp_mon (5). Driftfile / var/lib/ntp/drift# Permit time synchronization with our time source But do not# permit the source to query or modify the service on this system.restrict default nomodify notrap nopeer noquery# Permit all access over the loopback interface. This could# be tightened as well But to do so would effect some of# the administrative functions.restrict 127.0.0.1 restrict:: Hosts on local network are less restricted.#restrict 192.168.1.0 mask 255.255.255.0 nomodify notraprestrict 10.0.0.0 mask 255.0.0.0 nomodify notraprestrict 172.16.0.0 mask 255.240.0.0 nomodify notrapservice 10.0.0.25 Use public servers from the pool.ntp.org project.# Please consider joining the pool (http://www. Pool.ntp.org/join.html) .server ntp.ntsc.ac.cn iburstserver 0.centos.pool.ntp.org iburstserver 1.centos.pool.ntp.org iburstserver 2.centos.pool.ntp.org iburstserver 3.centos.pool.ntp.org iburst#broadcast 192.168.1.255 autokey # broadcast server#broadcastclient # broadcastclient # broadcast 224.0.1.1 autokey # multicast server#multicastclient 224.0.1 . 1 # multicast client#manycastserver 239.255.254.254 # manycastserver # manycastclient 239.255.254.254 autokey # manycastclient # Enable public key cryptography.#cryptoincludefile / etc/ntp/crypto/pw# Key file containing the keys and key identifiers used when operating# with symmetric key cryptography. Keys / etc/ntp/keys# Specify the key identifiers which are trusted.#trustedkey 4 8 42# Specify the key identifier to use with the ntpdc utility.#requestkey 8# Specify the key identifier to use with the ntpq utility.#controlkey 8# Enable writing of statistics records.#statistics clockstats cryptostats loopstats peerstats# Disable the monitoring facility to prevent amplification attacks using ntpdc# monlist command when default restrict does not include the noquery flag. See# CVE-2013-5211 for more details.# Note: Monitoring will not be disabled with the limited restriction flag.disable monitor

3. Start NTP

Systemctl start ntpd.service

4. Add NTP to boot boot

Chkconfig ntpd on

5. View NTP service status

Ntpq-p

6. Turn on the firewall

Firewall-cmd-add-service=ntpfirewall-cmd-permanent-add-service=ntp

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.