Offline NTP time sync

Information and support for EnvisaLink modules.

Moderators: EyezOnRich, GrandWizard

dolenec
Posts: 8
Joined: Mon Feb 25, 2019 3:56 pm

Offline NTP time sync

Postby dolenec » Mon Mar 11, 2019 6:03 am

Own NTP IP settings for receiving correct current time from local network device

Can we expect own NTP server setting so that EnvisaLink4 can be used in offline mode (because of security settings I intend block device from WAN).

So I would like to write own NTP IP in device web interface. In my case I would write router gateway IP address from which EnvisaLink4 would receive current correct time as other devices in network already does..

PS. I'm using EVL4 card with Home Assistant and it's working great. I'm using my Sonoff RF receiver so that I enable/disable DSC alarm with my remote keys..

So, I'm loving it because it's working really great.. Only thing is local NTP server function which is missing..

K-Man
Posts: 122
Joined: Fri Jun 01, 2012 1:08 pm

Re: Offline NTP time sync

Postby K-Man » Mon Mar 11, 2019 10:24 am

No, the EVL4 is pretty much out of code space. All new features will have to be cloud-based.

If you are using a DSC panel the time comes from the local panel anyow, not from the network.

K

dolenec
Posts: 8
Joined: Mon Feb 25, 2019 3:56 pm

Re: Offline NTP time sync

Postby dolenec » Mon Mar 11, 2019 10:57 am

I want to use DSC and ENV4 card in offline mode, so blocked from internet by my router Ubiquiti ER-4.
If I block internet and disconnect power from DSC and ENV4 card then after powering back to ON DSC do not get correct date/time (accually it stayes at the same date/time: year 1970), same status as before when no EVL4 card was inserted.

If I enable internet access to ENV4 card then time/date is set correctly after power fail.

So, if I understand correctly this settings are edited in web or cloud. So maybe enable me in the cloud settings that I can set own NTP server IP which will be used in ENV4 card if possible..

Or do you say that this settings regarding NTP server are stored in DSC alarm motherboard? In this case enable option so that I can edit this settings (if possible) from the cloud..

If this is not option, then please tell me where I can edit in DSC this NTP settings so that I will manually change..

Thank you for your answer...

PS. As alarm device we all know that best secure option is to use in offline mode and connected to internet via VPN /firewall access..

dolenec
Posts: 8
Joined: Mon Feb 25, 2019 3:56 pm

Re: Offline NTP time sync

Postby dolenec » Tue Mar 12, 2019 11:03 am

So, can I expect some answer to my additional questions?

Crikey
Posts: 83
Joined: Mon Aug 22, 2016 10:04 am

Re: Offline NTP time sync

Postby Crikey » Wed Mar 13, 2019 11:43 am

dolenec wrote:PS. As alarm device we all know that best secure option is to use in offline mode and connected to internet via VPN /firewall access..

We do? Can you explain why we know that?

dolenec
Posts: 8
Joined: Mon Feb 25, 2019 3:56 pm

Re: Offline NTP time sync

Postby dolenec » Wed Mar 13, 2019 11:52 am

Still not answered to my additional question regarding NTP..

My policy is to have these devices offline or controled access to internet via VPN..

GrandWizard
Posts: 1836
Joined: Tue Nov 16, 2010 4:08 pm

Re: Offline NTP time sync

Postby GrandWizard » Wed Mar 13, 2019 6:10 pm

What are you asking? The Envisalink doesn't use NTP and I think K-man explained that it isn't going to be added.

And I agree with Crikey, only about 0.2% of Envisalink owners do not use the cloud service so you are definitely in the minority in your opinion about using it "offline".

Crikey
Posts: 83
Joined: Mon Aug 22, 2016 10:04 am

Re: Offline NTP time sync

Postby Crikey » Fri Mar 15, 2019 10:01 am

GrandWizard wrote:And I agree with Crikey, only about 0.2% of Envisalink owners do not use the cloud service so you are definitely in the minority in your opinion about using it "offline".

My question is even more fundamental than that. He claimed "... we all know that best secure option is to use in offline mode and connected to internet via VPN /firewall access."

For one: If it's "connected to the Internet" it's not off-line. But, more fundamentally than that: What is the deal with all the VPNing, lately? Everywhere I turn it's "VPN this" and "VPN that" and "VPN the other thing." As an ex-IT professional with over 25 years in the field as an IT professional, and having been managing networks and been connected to the Internet even before that: I don't get it.

In the instant case: Unless you suspect some bad actor is going to be sniffing your or EyezOn's Internet connections for traffic, there's really no point. It would just add another layer of complexity and several more points-of-failure. And they'd have to break EyezOn's encryption to get usable information. Unless you're protecting a major financial institution or s00p3r s3krit government installation I think that exceedingly unlikely. Certainly the common burglar hasn't the tool set, or is willing to invest the time, to do that.

I've got three servers at different data centers in the U.S. I could have another anywhere I want in the world. I could easily set up VPN end points on any of them and just as easily set up my router to automatically route anything I want through any of them, based on any combination of source port(s), destination port(s) or destination address(es) I desire. If I really thought there was any point to doing that in the case of either our EyezOn system or our surveillance system: I would.

I don't.

But I'm not perfect. I don't know everything. Hell, sometimes it I find out I don't even really know what I thought I knew :). Thus my question to the OP: "Why do we know that?" Educate me, please.


Return to “EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)”

Who is online

Users browsing this forum: No registered users and 12 guests