On Wed, Dec 20, 2023 at 12:23:31AM +0100, Karel Lucas wrote: >Dear Mr. Henderson, > >From your answer I understand that to use the ntp daemon the interfaces still >need an IP address. Unfortunately, a GPS unit is not available or desirable, >so it seems to me that I will have to do it without a calibrated time, if >there is no other option.
Having an out-of-band management interface is a pretty standard architecture concept these days. Add a third NIC and control access by local pf policies, multi-factor authentication, etc.