Who can be the time source of switch and firewall
Windows versions of ntp servers cannot be used as sources in time synchronization between switches and firewalls.
Using domain controllers as ntp servers, cisco switches as clients cannot synchronize with the ntp server.
It is estimated that the reason is: ntp authenticate cannot pass
An ntp packet without authentication is 90 bytes and an ntp packet with authentication field is 110 bytes
The router is the best source of ntp, and the authentication of the client and server can match.
