☰

使用 Ubuntu 为本地网络设置私有 NTP 服务器

tag-icon • tag-icon ubuntu ntp
使用 Ubuntu 为本地网络设置私有 NTP 服务器

我想用 ubuntu 为本地网络设置一个小型 NTP 服务器。我希望只从这台服务器获取时间，而不从外部网络服务器获取时间。此外，我想启用向请求它的客户端发送 MONLIST 的功能。我修改了 NTP.conf 文件，但我认为它不起作用。你能帮助我吗？服务器的 IP 地址为 192.168.2.2，需要时间和 MONLIST 的客户端的 IP 地址为 192.168.3.3 这两个网络使用防火墙连接 这是 ntp.conf 文件

# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help

driftfile /var/lib/ntp/ntp.drift

# Enable this if you want statistics to be logged.
#statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable

# Specify one or more NTP servers.

# Use servers from the NTP Pool Project. Approved by Ubuntu Technical Board
# on 2011-02-08 (LP: #104525). See http://www.pool.ntp.org/join.html for
# more information.
#pool 0.ubuntu.pool.ntp.org iburst
#pool 1.ubuntu.pool.ntp.org iburst
#pool 2.ubuntu.pool.ntp.org iburst
#pool 3.ubuntu.pool.ntp.org iburst

server 127.127.1.0 iburst
fudge 127.127.1.0 stratum 16

# Use Ubuntu's ntp server as a fallback.
#pool ntp.ubuntu.com

enable monitor

# Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
# details.  The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
# might also be helpful.
#
# Note that "restrict" applies to both servers and clients, so a configuration
# that might be intended to block requests from certain clients could also end
# up blocking replies from your own upstream servers.

# By default, exchange time with everybody, but don't allow configuration.
#restrict -4 default kod notrap nomodify nopeer noquery limited
#restrict -6 default kod notrap nomodify nopeer noquery limited

# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict 192.168.3.3
restrict ::1

# Needed for adding pool entries
restrict source notrap nomodify noquery

# Clients from this (example!) subnet have unlimited access, but only if
# cryptographically authenticated.
restrict 192.168.3.3 mask 255.255.255.0 notrust


# If you want to provide time to your local subnet, change the next line.
# (Again, the address is an example only.)
#broadcast 192.168.123.255

# If you want to listen to time broadcasts on your local subnet, de-comment the
# next lines.  Please do this only if you trust everybody on the network!
disable auth
#broadcastclient

#Changes recquired to use pps synchonisation as explained in documentation:
#http://www.ntp.org/ntpfaq/NTP-s-config-adv.htm#AEN3918

#server 127.127.8.1 mode 135 prefer    # Meinberg GPS167 with PPS
#fudge 127.127.8.1 time1 0.0042        # relative to PPS for my hardware

#server 127.127.22.1                   # ATOM(PPS)
#fudge 127.127.22.1 flag3 1            # enable PPS API

答案1

您的客户端与 NTP 服务器位于不同的子网中。请再次查看您的网络拓扑。也许是防火墙的问题..！在子网的两侧保持 123 tcp 端口和 123 utp 端口打开，或将 NTP 服务器与客户端放在同一个子网中，然后重试。！这两个子网是如何连接在一起的？通过路由器？还是它们是 VLAN？？？什么？？？

相关内容