Issue with NTP

ITtech2010

Hey all I am lost with synching the router to the ntp server. I am able to ping it but it's not synching. Here's the ntp st and asso commands from both routers.

Router with issue


hq-3560-2#sho ntp st
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 119.2092 Hz, actual freq is 119.2086 Hz, precision is 2**18
reference time is D26319DC.CA3DABB3 (22:00:44.790 EST Mon Nov 7 2011)
clock offset is 0.6783 msec, root delay is 164.31 msec
root dispersion is 16.95 msec, peer dispersion is 5.16 msec
hq-3560-2#sh ntp ass

address ref clock st when poll reach delay offset disp
~10.58.49.25 192.73.48.2 3 83d 64 0 4.0 0.68 16000.
~10.53.17.121 0.0.0.0 16 - 64 0 0.0 0.00 16000.
~10.53.17.120 0.0.0.0 16 - 64 0 0.0 0.00 16000.
~10.53.17.165 0.0.0.0 16 - 64 0 0.0 0.00 16000.
* master (synced), # master (unsynced), + selected, - candidate, ~ configured

hq-3560-2#sh ntp ass det
10.58.49.25 configured, insane, invalid, stratum 3
ref ID 192.73.48.2, time D26319D3.06EA8000 (22:00:35.027 EST Mon Nov 7 2011)
our mode client, peer mode server, our poll intvl 64, peer poll intvl 512
root delay 160.29 msec, root disp 11.12, reach 0, sync dist 157.028
delay 4.01 msec, offset 0.6783 msec, dispersion 16000.00
precision 2**18, version 3
org time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
rcv time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
xmt time D2D12B05.59146325 (09:43:17.347 EST Mon Jan 30 2012)
filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filtoffset = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filterror = 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0

10.53.17.121 configured, insane, invalid, unsynced, stratum 16
ref ID 0.0.0.0, time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
our mode client, peer mode unspec, our poll intvl 64, peer poll intvl 1024
root delay 0.00 msec, root disp 0.00, reach 0, sync dist 8999342.728
delay 0.00 msec, offset 0.0000 msec, dispersion 16000.00
precision 2**5, version 3
org time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
rcv time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
xmt time D2D12B1A.58536368 (09:43:38.345 EST Mon Jan 30 2012)
filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filtoffset = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filterror = 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0

10.53.17.120 configured, insane, invalid, unsynced, stratum 16
ref ID 0.0.0.0, time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
our mode client, peer mode unspec, our poll intvl 64, peer poll intvl 1024
root delay 0.00 msec, root disp 0.00, reach 0, sync dist 8999342.728
delay 0.00 msec, offset 0.0000 msec, dispersion 16000.00
precision 2**5, version 3
org time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
rcv time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
xmt time D2D12B1A.586273D6 (09:43:38.345 EST Mon Jan 30 2012)
filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filtoffset = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filterror = 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0

10.53.17.165 configured, insane, invalid, unsynced, stratum 16
ref ID 0.0.0.0, time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
our mode client, peer mode unspec, our poll intvl 64, peer poll intvl 1024
root delay 0.00 msec, root disp 0.00, reach 0, sync dist 8999342.728
delay 0.00 msec, offset 0.0000 msec, dispersion 16000.00
precision 2**5, version 3
org time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
rcv time 00000000.00000000 (19:00:00.000 EST Thu Dec 31 1899)
xmt time D2D12B1A.587DE728 (09:43:38.345 EST Mon Jan 30 2012)
filtdelay = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filtoffset = 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00
filterror = 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0

hq-3560-2#sho run | in ntp
permit udp 10.58.16.0 0.0.7.255 10.53.9.0 0.0.0.255 eq ntp
permit udp 10.58.32.0 0.0.7.255 10.53.9.0 0.0.0.255 eq ntp
permit udp 10.58.9.0 0.0.0.255 10.53.16.0 0.0.7.255 eq ntp
permit udp 10.58.16.0 0.0.7.255 10.53.16.0 0.0.7.255 eq ntp
permit udp 10.58.32.0 0.0.7.255 10.53.16.0 0.0.7.255 eq ntp
ntp clock-period 36028999
ntp server 10.58.49.25
ntp server 10.53.17.121
ntp server 10.53.17.120
ntp server 10.53.17.165

Router with no issue

NYCGW#sho ntp status
Clock is synchronized, stratum 8, reference is 127.127.7.1
nominal freq is 250.0000 Hz, actual freq is 249.9948 Hz, precision is 2**18
reference time is D2D128B4.2B4CA999 (09:33:24.169 EST Mon Jan 30 2012)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.02 msec, peer dispersion is 0.02 msec
NYCGW#sho ntp ass

address ref clock st when poll reach delay offset disp
*~127.127.7.1 127.127.7.1 7 32 64 377 0.0 0.00 0.0
~10.58.49.25 192.73.48.2 3 83d 64 0 0.9 -0.05 16000.
~10.53.17.121 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
~10.53.17.120 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
~10.53.17.165 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
* master (synced), # master (unsynced), + selected, - candidate, ~ configured
NYCGW#sho sntp ?
| Output modifiers
<cr>

NYCGW#sho sntp
%SNTP is not running.
NYCGW#sh ntp st
Clock is synchronized, stratum 8, reference is 127.127.7.1
nominal freq is 250.0000 Hz, actual freq is 249.9948 Hz, precision is 2**18
reference time is D2D12B34.2EA94D9A (09:44:04.182 EST Mon Jan 30 2012)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.02 msec, peer dispersion is 0.02 msec
NYCGW#sh ntp ass

address ref clock st when poll reach delay offset disp
*~127.127.7.1 127.127.7.1 7 48 64 377 0.0 0.00 0.0
~10.58.49.25 192.73.48.2 3 83d 64 0 0.9 -0.05 16000.
~10.53.17.121 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
~10.53.17.120 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
~10.53.17.165 0.0.0.0 16 - 1024 0 0.0 0.00 16000.
* master (synced), # master (unsynced), + selected, - candidate, ~ configured
NYCGW#sh run | in ntp
ntp clock-period 17180220
ntp master
ntp server 10.58.49.25
ntp server 10.53.17.121
ntp server 10.53.17.120
ntp server 10.53.17.165
NYCGW#

networker050184

Your router that is working is set as NTP master and actually synching to itself (hence the 127.127.7.1 address). Doesn't look like either is actually synching to your time source.

ITtech2010

That's weird....Any idea on what I should do? I have to update NTP on every device on our Infrastructure and I'm a little lost on how to configure it.

I know I would use ntp server (IP address) but then what next? I looked on the run configs on other devices and I'm not seeing how those devices are configured. Any help would be appreciated.

Monkerz

Do you have an ACL somewhere blocking UDP 123?

Monkerz

Have you reloaded the switches since configuring NTP? Unless this is the first time you have configured NTP on the switch, the current time on the switch must be within 4,000 seconds of the NTP server or it will not sync.

According to Cisco...

ITtech2010

I just started with the company recently and I noticed the issue when looking at syslog and it shows the incorrect date. But I am confident that the switches have not be reset recently.

ITtech2010

I went thru the acl nothing blocking udp. thanks for looking into this.

Monkerz

Set the current date and time manually and see if the NTP service will sync.

ITtech2010

Do you know how for the 3560's?

It only let's me set timezone and summer-time

ITtech2010

NM i just found it. I did it but it's still not sync

Monkerz

Remove NTP Master.

Is NTP authentication used?

Timezone correct?

I haven't seen this problem, so I am just taking stabs here.

ITtech2010

np i appreciate the input I'm just trying to learn so this is great. And the timezone is set correctly. And no ntp authentication is not in use. I think it's just manual configuration. I tried looking at the other routers we have on our other networks and there's no authentication. Pretty weird.

Monkerz

Are any of the other router using NTP and actually syncing with something other than itself?

ITtech2010

Hey Monkerz

Thanks for helping out. I was able to find a valid NTP server and added it to all the NY routers. It seems that did the trick. The problem I have now is some of our Philly and Carlstadt network equipment are not synchronizing with the ntp server. I tried to use the NTP servers that the other routers are using and it's not synching still. So now I am working on fixing this issue for our other networks lol.

Monkerz

I'm glad to hear you were able to get NY sync'd. Make sure your other routers are able to reach the NTP server and follow the same steps you took in the thread above.

Have fun!

ITtech2010

Yeah I will try to do the same steps. I have to wait until after 4 that's when the traders are done for the day. I will check to make sure the clock is current and maybe try removing all the ntp servers in the list and re added again. There are a couple in the associations that I am able to ping but it's still not working after I add it. Oh well should be fun:)

blindrox

I had a similar problem in my home lab over the weekend. Set up an NTP master, and my two other routers would not sync despite confirming connectivity. Issue was resolved after I changed the stratum number on my ntp master - from 3 to 4. No idea why this worked - NTP is new to me.