Services
Network Services (NTP, Syslog, DNS)
NTP synchronizes device clocks, syslog centralizes logging, and DNS resolves hostnames, all commonly configured together for operational visibility on IOS devices.
What you need to know
- NTP stratum levels range from 0 (reference clocks) to 15, with lower numbers indicating closer proximity to the authoritative time source.
- Syslog severity levels range from 0 (Emergency) to 7 (Debugging); default console/logging buffered level is often debugging in labs.
- Syslog severity levels in order: 0 Emergency, 1 Alert, 2 Critical, 3 Error, 4 Warning, 5 Notice, 6 Informational, 7 Debugging.
- logging trap sets the severity threshold sent to a remote syslog server; only messages at or below that number are sent.
- ip domain-lookup enables DNS resolution for unqualified hostnames typed at the CLI; ip name-server sets the resolver address.
- NTP associations can be configured as server (client-only) or peer (symmetric active) relationships.
- show clock detail and ntp status confirm synchronization state (synchronized vs unsynchronized).
Configuration commands
| Command | Mode | Purpose |
|---|---|---|
| ntp server 192.168.1.1 | config | Configures the device as an NTP client of the specified server. |
| ntp master 3 | config | Configures the device as an NTP master with stratum 3. |
| clock timezone EST -5 | config | Sets the local time zone offset from UTC. |
| logging host 192.168.1.20 | config | Sends syslog messages to a remote syslog server. |
| logging trap warnings | config | Sets the syslog severity threshold sent to the remote host to level 4. |
| logging buffered 16384 debugging | config | Configures the local logging buffer size and severity level. |
| service timestamps log datetime msec | config | Adds detailed timestamps to log messages. |
| ip domain-lookup | config | Enables DNS name resolution for CLI commands. |
| ip name-server 8.8.8.8 | config | Sets the DNS server used for name resolution. |
Verify it
- show ntp status
- show ntp associations
- show clock detail
- show logging
- show running-config | include logging
- ping example.com
Common mistakes
- Confusing syslog severity numbers, assuming higher numbers mean more severe when 0 is most severe.
- Forgetting that NTP synchronization takes time; expecting show ntp status to show synchronized immediately.
- Leaving ip domain-lookup enabled with no DNS server reachable, causing CLI typo delays while it attempts resolution.
- Setting logging trap to a level that filters out the messages needed for troubleshooting.
- Not matching clock timezone with daylight saving settings, causing timestamp confusion in logs.
Practise Network Services (NTP, Syslog, DNS) in a real CLI
Generated labs, graded against the simulated network state.