Yes, you are right.
But I have a doubt.
And there is a problem.
--
I need to clarify our "server map".
We are in a VLAN outside the rest of the work except for some protocol like SNTP (123).
But only for the VCSA. (vcenter)
The ESXi server are not connected with the rest of the world.
We must open a console to VCSA to manage our ESXi server, and VM too.
It just to secure everything.
-
Then our VCSA is able to synchronise with ou SNTP server in the rest of the world.
Then, our ESXi are configured to synchronise with the VCSA : it doesn't work. (command ntpq -P in the shell)
Then, our VMware tools are configured to synchronize with the hosts (ESXi).