网关ntp服务器安装配置

Network Time Protocol（NTP）是用来使计算机时间同步化的一种协议，它可以使计算机对其服务器或时钟源（如石英钟，GPS等等)做同步化，它可以提供高精准 度的时间校正（LAN上与标准间差小于1毫秒，WAN上几十毫秒），且可介由加密确认的方式来防止恶毒的协议攻击。

ntp服务器地址有很多，等级各不相同。我们主要使用国家授时中心的地址210.72.145.44

---

ntp服务器的安装很简单

yum install ntp

配置：

vim /etc/ntp.conf

我的配置文件：

# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery

# Permit all access over the loopback interface.  This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict -6 ::1

# Hosts on local network are less restricted.
restrict 192.168.0.0 mask 255.255.255.0 nomodify notrap

# Use public servers from the pool.ntp.org project.
# Please consider joining the pool ().
server 210.72.145.44 prefer
server 0.asia.pool.ntp.org
server 1.asia.pool.ntp.org
server 2.asia.pool.ntp.org
server 3.asia.pool.ntp.org
#server 0.rhel.pool.ntp.org
#server 1.rhel.pool.ntp.org
#server 2.rhel.pool.ntp.org

#broadcast 192.168.1.255 key 42         # broadcast server
#broadcastclient                        # broadcast client
#broadcast 224.0.1.1 key 42             # multicast server
#multicastclient 224.0.1.1              # multicast client
#manycastserver 239.255.254.254         # manycast server
#manycastclient 239.255.254.254 key 42  # manycast client

# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available.
server 127.127.1.0
fudge   127.127.1.0 stratum 10

# Drift file.  Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
driftfile /var/lib/ntp/drift

# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys

# Specify the key identifiers which are trusted.
#trustedkey 4 8 42

# Specify the key identifier to use with the ntpdc utility.
#requestkey 8

# Specify the key identifier to use with the ntpq utility.
#controlkey 8
#restrict 0.rhel.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#restrict 1.rhel.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery
#restrict 2.rhel.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery

启动ntpd:

/sbin/service ntpd start

查看ntpd状态：

ntpstat

或者更详细的状态（需要root权限）

/usr/sbin/ntpq -p

设置把时间同步到bios里

vim /etc/sysconfig/ntpd

修改# SYNC_HWCLOCK=yes

---

内网机器上用cron写一个命名，固定时间从网关上同步时间

crontab -e

写入

0 10 * * * /usr/sbin/ntpdate 192.168.0.1 >> /root/ntpdate.report