need my server behind a 501 pix to obtain naval time..

[gman10]

Hello all-

Basically, I have a 501 pix, the outside interface allows all traffic out but the inside is another story.. I would like to have my Windows 2000 server to obtain a time sync from the US Naval Observatory.. The server as all other workstations are in a 10.0.0.x network.. So, once my server goes thru the outside port and synchronizes the correct time with naval it would need to do this via the inside interface on the PIX.. what do I need to do to assure this happens..I hope anyone can help..
I know what needs to be done on the Win2k server as far as the using the proper net time command but the pix is the question..

gman

 

[Robnhood]

Each client would have to run the command

net time \\server /set /yes

Craig

http://www.SecurelySpeaking.com

 

[gman10]

Hi Craig-

Just wanted you to know that this is not a Windows 2000 domain, just a few workgroup with a few pc's in each ALL holding a 10.x.x.x address (same range).. I was wondering if I could just run-> nettime /setsntp:ntp2.usno.navy.mil
at the server and then net time //servername /set /yes on all the workstations even though it's not a true domain.. this should work..

thanks again for any info you can provide

gman

 

[Robnhood]

Yes.

Craig

http://www.SecurelySpeaking.com

 

[bytehd]

PIX NTP ACL:

access-list mylist permit udp any any eq ntp

http://www.insyncva.com