Configure NTP on the core switch

You can configure a core switch as an NTP server by synchronizing it to a reliable external NTP source and pointing downstream switches to it, following a hierarchical NTP design.

Best Practices for NTP on Core Switches

• Use a hierarchical NTP setup: Core switches should synchronize with authoritative external NTP servers (e.g., pool.ntp.org or GPS-based NTP servers) and act as NTP servers for distribution switches, which in turn serve access switches .
• Avoid using ntp master unless absolutely necessary; it is better to synchronize the core switch to a trusted external source .
• Redundancy: Configure at least two or three NTP sources for reliability. If multiple core switches exist, they can peer with each other to arbitrate time .
• Authentication: Use NTP authentication between the core switch and downstream switches to ensure time integrity .

Configuration Steps on Cisco IOS-XE Switch

1. Synchronize the core switch to an external NTP server:

configure terminalntp server preferend

• The prefer keyword marks the most reliable source.
• You can add multiple NTP servers for redundancy.

1. Enable the core switch as an NTP server for internal devices:

configure terminalntp server end

• Any Cisco switch automatically acts as an NTP server once it is synchronized .

1. Configure downstream switches to use the core switch as their NTP server:

configure terminalntp server end

• Distribution switches point to the core switch, and access switches point to distribution switches for a hierarchical design .

1. Optional: Configure NTP authentication for security:

ntp authenticatentp authentication-key 1 md5 ntp trusted-key 1ntp server key 1

• This ensures that only authorized devices can synchronize with your NTP server .

Verification

• Check NTP status on the core switch:

show ntp statusshow ntp associations

• Ensure the stratum level is appropriate (lower stratum indicates higher accuracy) and that downstream switches are synchronized.

Summary

By configuring your core switch to synchronize with a reliable external NTP source and serving as the NTP server for distribution and access switches, you maintain accurate, hierarchical time synchronization across your network. Implementing authentication and redundancy ensures reliability and security .