Network Servers and Services Lesson 006: NTP Servers Part 2

Hierarchical Structure of Time Sources

Organized into stratum layer to ensure accurate and reliable time distribution.

What are the four basic stratum layers?

0, 1, 2, and 3.

Where do additional stratum layers come from?

From an organization, should they feel they need them.

Stratum 0

Provide highly accurate time but are not directly connected to the networks.

What uses the stratum 0 NTP Stratums layer?

Atomic clocks and GPS clocks.

Stratum 1

Receive time from stratum 0 clocks and distribute it to the network to offer high accuracy.

Stratum 2

Synchronize with stratum servers and further distribute the accurate time to other network devices.

Stratum 3

Continue the hierarchy and each of these subsequent stratums slightly less accurate.

Why is each stratum less accurate than the last?

Due to network latency.

How does NTP ensure that the time delay from subsequent stratums is mitigated?

Through the use of algorithms.

What does NTP’s utilization of algorithms ensure?

That all devices at all levels still receive a high level of time accuracy.

How do organizations typically implement NTP?

By configuring one or more dedicated NTP servers within their networks.

How do dedicated NTP servers keep accurate time?

By synchronizing with external time sources, like stratum 1 or stratum 2 servers.

How do internal devices keep time?

The dedicated NTP server that got the time from an external server, distributes it to devices on the network.

What is an additional way that NTP can operate?

In a peer-to-peer mode.

Why is it more common for NTP to operate on centralized servers in enterprise environments, as opposed to peer-to-peer mode?

Because of their higher levels of consistency and security.

Why must NTP servers be secured against misuse and attacks?

Because they are a critical service.

How could attackers exploit NTP?

By disrupting time synchronization or using it as part of a distributed denial of service.

How can NTP servers be safeguarded?

By restricting access through firewalls or access control lists, configuring authentication to accept time updates from trusted sources, and monitoring logs for unusual activity.

What are examples of unusual activity on a NTP server?

Excessive queries or spoofed time data.