Juniper Firewall Application Instance date time setting

Juniper Firewall set up the system clock, there are three ways, choose a way to complete the corresponding setup work:

1, using the command line method, in the CLI command line interface settings, using the command set clock mm/dd/yyyy hh:mm:ss.

2. Use the "Sync Clock with Client" option in the Web management interface:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/58/22/wKioL1SqOzKRtV5-AAVqFpekUuw546.jpg "title=" Qq20150105151906.png "alt=" Wkiol1sqozkrtv5-aavqfpekuuw546.jpg "/>

However, after clicking on this option, you will be prompted whether to enable daylight saving time function, note:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/58/23/wKioL1SqP9jQYXSVAAUw04NP_qQ528.jpg "title=" Qq20150105153849.png "alt=" Wkiol1sqp9jqyxsvaauw04np_qq528.jpg "/>

If you select Yes, the Daylight saving time option is enabled and the default daylight saving time is configured as follows:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/58/26/wKiom1SqOyjxchS1AAVhDlPGX9I146.jpg "title=" Qq20150105152201.png "alt=" Wkiom1sqoyjxchs1aavhdlpgx9i146.jpg "/>

Usually we do not choose Yes to enable daylight saving time, and choose No only synchronize the client's way, so that the operation is simple and easy to use, the firewall time can be very quickly and our current connection to the client host time consistent.

Note: If the Daylight saving Time option is enabled, then the system will be 1 hours faster than the exact time, and daylight saving time is a time-of-day way to promote early to bed and early to save energy, but it is less applicable in computers, because we are more in the log to see the exact occurrence of events, It would be cumbersome if the time for each event had to be extrapolated.

After the initial setup time, if the firewall is running for a long time after the clock is not allowed, we hope that it can automatically synchronize time to the time server, this time the use of NTP function, using the NTP function to specify the time server, At this time, we can specify the intranet or the external network of the time server can be, just need to indicate the server to be accessed through the specific port of the firewall access to, for example, if you are using a time server on the public network, then set the source Interface you can specify the firewall outside the network exit, the specific port is the external network port, can be viewed in the Network-interface:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/58/26/wKiom1SqPAXinFzXAAYQkeS0RN0791.jpg "title=" Qq20150105152543.png "alt=" Wkiom1sqpaxinfzxaayqkes0rn0791.jpg "/>

After you have identified the information that you want to fill out, add the configuration in the NTP configuration section:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/58/26/wKiom1SqPIDgn3s2AAWTCuhJcMQ616.jpg "title=" Qq20150105152746.png "alt=" Wkiom1sqpidgn3s2aawtcuhjcmq616.jpg "/>

Using a time server in the intranet is similar, but it is important to note that the intranet time server needs to configure policies that allow it to synchronize time with other servers on the Internet through a firewall, which is a bit cumbersome to configure. Most of the options are well understood, just need to pay attention to maximum time adjustment this option, the default value is 3Seconds, meaning that when the firewall device and the specified time server is within the specified 3 seconds, the synchronization time is allowed, and if the time difference is very large, Instead of synchronizing, in the log there will be the following prompt:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/58/22/wKioL1SqM4STIRtjAAfBGCHJWI8751.jpg "title=" Qq20150105144555.png "alt=" Wkiol1sqm4stirtjaafbgchjwi8751.jpg "/>

This situation is similar to the time synchronization mechanism in Linux systems, which is to avoid violence update time, because the time interval of the allowed synchronization time is too large, it will cause a period of time on the server is not normal and then suddenly to a future time, But this is usually when we just set the synchronization time is not what we want to appear, we hope that even if the time difference is very large, but also to synchronize, so this allows the difference between the time interval option can be set larger.

If the synchronization clock succeeds, the following is displayed in the log:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/58/25/wKiom1SqM9LizyiCAAeWUTb_10E693.jpg "title=" Qq20150105145046.png "alt=" Wkiom1sqm9lizyicaaewutb_10e693.jpg "/>

After the system is automatically synchronized again, the resulting adjustments will usually be very small, such as:

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/58/22/wKioL1SqNUCxWaN5AAenRmsfzpc974.jpg "title=" Qq20150105145336.png "alt=" Wkiol1sqnucxwan5aaenrmsfzpc974.jpg "/>

The display of these log messages indicates that our time synchronization settings were successful.

Juniper Firewall Application Instance date time setting