NTP on UCS Mngr.

Hello,
I see a clock drift between the NTP server and the UCS manager (when NTP is properly configured ). How can I set off this drift and how can I ensure that such an instance doesn't happen again ?
REgards,
Naleendra

on your swith or rtr, be sure they have NTP setup
then type
sh ntp ass
be sure to point to either a local GPs time source, ceisiem/SP soucre or a suitable stratum 1 source on the internet
once first setup, it will take a few hours to synchronize, after that they will drift very little
afte they are synb, check the later command to ensure that yu are in deed in sync with a proper time source.
most people have all their end points to point the AD serves. these in turn pint to the reference. time source
time reference use this pyramid strcuture for stability and reduction in latency

Similar Messages

UCS C22 M3 NTP Offset?

I'm having issues with the NTP setting on the C22s we purchased. I can configure NTP just fine through the CIMC but it defaults to UTC and I need to set the offset to -8 for PST so that the system Clock is accurate.
The documentation I've been able to find says to ssh into the CIMC type scope system then scope service then set the offset but the scope system command doesn't work. Neither does the GUI instructions that I've found which say that the offset is in the Admin tab of the CIMC.
Anyone have any insight as to how I can set the NTP offset? For now I've disabled NTP as having it off by 8 hours will play havoc with my VM's on boot.
Thanks!

Hello,
I'm running into the same issue (UCS C-220M3, Cisco Business Edition 6000). After my research I am afraid NTP Offset is not supported at all when the server is managed directly via CIMC (rather than UCS Manager).
The Menus/Commands the OP mentioned are from UCS Manager.
Cheers
David

Where do the UCS blades get their system time from?

Hello,
I'm curious how the system clock gets set on UCS blades?
I have NTP setup in UCSM and expected the blades to set their time based on that during first boot at the very least.
I recently associated a new service profile to a blade and installed ESXi5. The VMware 60 grace license period showed the correct expiry date (04/07/2012) but as soon as I would connect with the vSphere client it would say grace period ended. After digging a bit the blade had a date set for someday in 2010? Anyone know why this would be the case and how I can set the blade system clock?
-Brian

Found a bug to track this issue CSCtj19497. There's no commit date yet, but I'm going to get some pressure put on this one.
I encourage you to open a quick TAC case and simply request to have this bug attached to your SR. This will give more ammunition to get this resolved faster.
Regards,
Robert

NTP error in RTMT of CUCM 8.6(2a) VM

Hello
We have migrated and upgraded an existing CUCM to 8.6(2a) on UCS using ESXi 4.1.
Everything seems to be fine exept that we are getting Syslogs in RTMT that are stating that there is something wrong with NTP (see Syslog message below).
At Sun Oct 16 13:40:30 CEST 2011 on node 10.0.128.24; the following SyslogSeverityMatchFound events generated: SeverityMatch : Critical MatchedEvent : Oct 16 13:40:04 NOS-CH-WBN-CM01 user 2 ntpRunningStatus.sh: The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However; an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team. AppID : Cisco Syslog Agent ClusterID : NodeID : NOS-CH-WBN-CM01 TimeStamp : Sun Oct 16 13:40:04 CEST 2011
However when we check the NTP status on the CUCM itself, there doesn't seems to be anything wrong (see CLI output below).
admin:utils ntp status
ntpd (pid 23400) is running...
     remote           refid      st t when poll reach   delay   offset jitter
==============================================================================
*172.16.2.241    192.53.103.108   2 u   49 128 377    0.755    3.376   0.771
172.16.1.241    172.16.2.241     3 u   71 128 377    7.399    2.603   1.052
synchronised to NTP server (172.16.2.241) at stratum 3
   time correct to within 35 ms
   polling server every 128 s
Current time in UTC is : Sun Oct 16 11:42:59 UTC 2011
Current time in Europe/Zurich is : Sun Oct 16 13:42:59 CEST 2011
admin:
Regarding the Syslog message, we haven't done any WM migrations and the storage is on the local disks of the UCS C200. So ther has not been any storage VMotions at all.
The guest is not synchronising the time with the ESXi host (unchecked in the VMware tools settings on the guest)
Has anyone faced a similar problem?
Does anyone know if the problem is caused by VMware or CUCM 8.6(2a)?
Any help and input is appreciated.
Many thanks in advance
Regards
Stefan Christen

Hello,
Could you copy 2 or 3 lines around this message ? It should specify to which remote peer talks about.
For ex I have the same issue on a CUCM 8.5.1 on UCS (ESX 4.0) when being testing 2 NTP relays, one in a Windows machine and another in a router.
I have the same message error for the ntp peer corresponding to the windows machine ("normal") and does not synchronize but I do not have any error message for the peer corresponding to the router.
Oct 27 06:13:06, HQ17-CUCM1, Warning, ntpRunningStatus.sh, : The local NTP client is off by more than the acceptable threshold of 3 seconds from NTP server 10.110.114.11. Restarting NTP ..., 71
                          ^^^^^^^^^^^^^
Oct 27 06:13:06, HQ17-CUCM1, Critical, ntpRunningStatus.sh, : The local NTP client is off by more than the acceptable threshold of 3 seconds from its remote NTP system peer. The normal remedy is for NTP Watch Dog to automatically restart NTP. However, an unusual number of automatic NTP restarts have already occurred on this node. No additional automatic NTP restarts will be done until NTP time synchronization stabilizes. This is likely due to an excessive number of VMware Virtual Machine migrations or Storage VMotions. Please consult your VMware Infrastructure Support Team., 72
In your case, verify if this message does not refer to 172.16.1.241, in which case does not seem an issue because your CUCM is in synch and prefers 172.16.2.241.
If that is the case, remove 172.16.1.241 as NTP server and check the logs.
You need perhaps another backup NTP server but it does not look to me very useful to point as backup NTP to a relay which is based on your primary NTP relay.
Let me know,
Brgrds
Jordi

How to check NTP synchronisation on UCSM ?

Hi all,
Just getting my feet wet with UCS and have our first system basically setup.
However I have defined 2 NTP servers within UCSM but it doesn't appear to be working. I've been hunting for an equivalent to show ntp status from IOS but so far haven't found one.
Is there a way to check the time sync status? Or would errors be captured in a log anywhere?
Thanks,
Anthony

Anthony
The FI's run multiple control planes viz NXOS, local management and UCSM.
UCSM is the sole way to configure the system while the others are read-only.
You can check ntp status from the NXOS plane.
To do that, ssh to the VIP.
connect nxos
At this point you are connected to the NXOS plane and show commands/debugs are applicable.
"show ntp ?" and you will see the options like status and peers.
Thanks
--Manish

Linux ntp server with cisco 3850

hi all
i'm trying to make sync with linux ntp with cisco 3850 here is the what i did
linux centos 6.5 (on the ucs virtual machin) . this is a ntp server
ip 10.1.1.251
===================================================
For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict -6 ::1
# Hosts on local network are less restricted.
restrict 10.1.1.0 mask 255.255.255.0 nomodify notrap
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html)
#server 1.centos.pool.ntp.org iburs
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst
server 127.127.1.0
fudge 127.127.1.0 stratum 2
#broadcast 192.168.1.255 autokey        # broadcast server
#broadcastclient                        # broadcast client
#broadcast 224.0.1.1 autokey            # multicast server
#multicastclient 224.0.1.1              # multicast client
#manycastserver 239.255.254.254         # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
and cisco 3850 configured this one
ntp server 10.1.1.241
and
show ntp status
clock is unsynchronized, stratum 16, reference is null
why...didn't work.. somebody help me..

Is there a typo in your post or configuration? You show the NTP server IP address as 10.1.1.251, but the router configured to use 10.1.1.241.
Regards

IPv6 Support on Cisco UCS 6248UP Device

Hi,
We are in process of implementing IPv6 in our production environment and wanted to know what needs to be done on UCS level to achive the same ?
We have Cisco 4948 and Nexus 3048 switches in our production environment above 6248 switch
Thanks,
Amit Vyas

Starting with 2.2.1b (El Capitan) IPv6 is supported (don't forget, Fabric Interconnect is a L2 switch, no L3 = routing)
IPv6 Management Support:
All 3 IP addresses (2 physical and 1 cluster) are now able to have IPv6 addresses as are the new CIMC “in band” addresses. Services such as NTP, DNS are also reachable via IPv6.

Does Phone NTP Server reference change my licensed files, (CUCM)?

Hi all,
Good day.
I just wanted to know of on my CUCM Admin web page, on PHONE NTP REFERENCE, if adding or deleting NTP's does make my CUCM to re-host my active licensed files.
Because I changed the NTP server on the CLI call manager, (delete it and added one). And now all my licenses are invalid
I have a few more questions.
Which are the differences between of the Phone NTP Reference Server and NTP reference servers (CLI)?
Which one I do not must change?
If mi licenses say "Invalid", what is the worst case scenario could happen with my current configurations of IP Phones/GW/GK/Trunks/CSS?
Thanks in advice.
John

I assume you are using a UCS server,,,
The license MAC is generated by hashing the following user-configured parameters:
◊ Time zone
◊ NTP server 1 (or ?none?)
◊ NIC speed (or ?auto?)
◊ Hostname
◊ IP Address (or ?dhcp?)
◊ IP Mask (or ?dhcp?)
◊ Gateway Address (or ?dhcp?)
◊ Primary DNS (or ?dhcp?)
◊ SMTP server (or ?none?)
◊ Certificate Information (Organization, Unit, Location, State, Country)
When you change any of the parameters that create the license MAC, the license that you obtained with it becomes invalid. You must request a rehosting of the license to obtain a valid license. The old license continues to work for a 30-day grace period.
To rehost your licenses, you must open a case with the licensing team. Contact the licensing team at [email protected]
During the grace period, you can change the settings back to the licensed values to make your original license valid again. If you need more than 30 days of grace period, change your settings back to the licensed values, then change them back to the new values that you want to use. You will get another 30- day grace period.
Please rate all useful posts
"opportunity is a haughty goddess who waste no time with those who are unprepared"

Licenses required for a VMware solution on top of UCS-B series

Hello All,
Looking for some guidance in order to develop a green field project, and appreciate any inputs.
Client wants to virtualize most of his corporate applications, mainly microsoft deployment such as AD, Exchange, Webserver, DNS, NTP, FTP, etc. This will be running within a single blade B200 M3. A second blade B200 M3 will host UC application (CUCM, Unity). A third blade B200 M3 will be hosting management applications such as Cisco Prime Infrastructure & Cisco ISE. The 4th blade B200 M3 will be hosting the vCenter and Nexus 1000v. Now, since B200 has two CPUs, these are the licenses we are considering:
2 vSphere ENT PLUS license per blade (1 per CPU). That is, 4 blades x 2 CPU each = 8 vSphere licenses
2 vCenter licenses (1 per CPU ) - single chassis
2 Microsoft Windows server 2008 R2 ENT licenses (1 per CPU) to support the microsoft deployment for corporate applications
1 Nexus 1000v (PN N1K-CSK9-UCS-404) - this is the PN inside the blade configuration. Question: Does this PN include VEM as well, or only the VSM? Do we need to add VEM licenses with PN N1K-VLCPU-xxx? If yes, how many? 4 Blades = 8 CPUs, that is 2 x L-N1K-VLCPU-04 ?
Please advise if these assumptions for licenses are correct.
On a side note: for the UC application, the blade will be diskless to comply with the design guide (specs-based), it will boot from a NetApp storage (F series) in NAS deployment through iSCSI over TCP/IP, and disks will be delivered through NAS using NFS protocol. Is there any issues on this approach?
Thank you!

You would be correct on the amount of vSphere Enterprise Plus licenses.
You would only need 1 vCenter license, it is licensed by instance, not by CPU.
For the 1000v licenses, take a look at this blog. Depending on the feature set that you require, there are two tiers of licenses for the 1000v. One license is free, and most likely will cover what you need. There is an advanced license that is $695 per processor. These licenses would include the VSM along with the VEM.
http://blogs.cisco.com/datacenter/new-nexus-1000v-free-mium-pricing-model/
Hope this helps!

NTP sets SMB clients to wrong time

Hi
The Server (Mac OS 10.6 server) is set as a time server for the domain but from yesterday reset most of the Windows clients that logged on via SMB to about 3/4s hr fast with the result that IP address's were dropped (Lease expired) and software relying on a network connection failed, time stamps of saved files were wrong and emails had the wrong time. In one case the month was changed to October so the guy went on holiday! Seriously, this is a big problem.
I've tried resetting the time locale, NTP time server and got rid of "LocalTime" which was a folder instead of a simlink but clients are still reporting time anomalies.
Thanks

ntp isn't particularly related to smb/cifs/samba, nor to dhcp, and ntp doesn't implement local time; ntp uses utc/gmt as the time base, and the local boxes adjust their time and timezones based on the client-local timezone definitions.
It could be that ntp is misconfigured, that something has gone seriously wacky with the ntp time base (hardware error? software error? network error? time-based attack? etc), or there's a rogue ntp server running.
Have a look at the ntp chatter in the system.log console log on the ntp server as a starting point, and at whatever passes for logging on the ntp clients, and at the settings for ntp. Out-of-the-box, there can be the requirement to tweak the ntp client or daemon configuration via the /etc/ntp.conf file, for instance.

Urgent Help required for UCS

Hi Team ,
We added new Chassis into our exisitng UCS infrastructure.
We discovered Chassis also & gave IPs to CIMC of new servers also.
New Chassis IOM to FI cabling is also correct.
But when i am trying to communicate with CIMC of Servers, connecion is failed.
Also i installed OS manually on 1of the blade after creating service profile , OS IP is not able to ping & coomunicate iwth outer world.
Same Fabric interconnect , Same port channel , Same uplinks , OLD Chassis is working fine.
New chassis not able to communicate with outter world.
What can be the issue ? Am i missing something in configuration ?
WHt new chassis CIMC & BLADE IP is not able to ping & communicate.

Hello Ashish,
Let us focus on network connectivity to OS interface.
Make sure you have allowed necessary vlans in the vNIC defined in the Service profile.
Does FI server ports learning the MAC address of the server in the correct VLAN ?
connect nxos
show mac address table
Padma

License Issue from MCS 6.1.3 to UCS 9.0

Hello all,
We are upgarding CUCM from 6.1.3 MCS to 9.1 UCS. Our plan is to jump from 6.1.3 to 6.1.5 to 9.1.
We took backup of 6.1.3 MCS via Disaster Backup Recovery & restore it at UCS after new installation of 6.1.3.
We contacted cisco licensing team to issue us temporaray license for 6.1.3 for UCS so that we can proceed to upgrade process. Cisco issued us license but we are not able to install it successfully. Its giving attached mac-address mismatch error.
We contacted back to license team again & they confirmed there is no issue in license file, its some thing with the system.
Can any one advise what could be wrong with system. I am sending the output from system, screen shot of error & license file.
Please advise.
admin:show status
Host Name    : MOSD-PUB
Date         : Sun Oct 20, 2013 10:45:15
Time Zone    : Asia/Bahrain
Locale       : en_US.UTF-8
Product Ver : 6.1.3.3000-1
Platform Ver : 2.0.0.1-1
Uptime:
10:45:16 up 6 days, 22:41, 2 users, load average: 0.05, 0.02, 0.00
CPU Idle:                          % System: 00.00%    User:   00.00%
IOWAIT: 00.00%     IRQ: 00.00%    Soft: 00.00%   Intr/sec: 107.00
Memory Total:        6154152K
        Free:        1160032K
        Used:        4994120K
      Cached:        3307852K
      Shared:              0K
     Buffers:         109412K
                        Total             Free            Used
Disk/active         20303712K        8864384K       11233056K (56%)
Disk/inactive       20303744K       19239544K          32828K (1%)
Disk/logging        70643356K       50605548K       16449292K (25%)
admin:
admin:show network eth0 detail
Ethernet 0
DHCP         : disabled            Status     : up
IP Address   : 10.30.35.2         IP Mask    : 255.255.255.000
Link Detected: yes                Mode       : Auto disabled, full, 100 Mbits/s
Duplicate IP : no
Queue Length : 1000               MTU        : 1500
MAC Address : 00:0c:29:6b:f8:ec
RX stats:
bytes   :      9299290   packets :       102331   errors :            0
dropped :            0   overrun :            0   mcast :            0
TX stats:
bytes   :     36462086   packets :       386068   errors :            0
dropped :            0   carrier :            0   colsns :            0
DNS
Not configured.
Gateway      : 10.30.35.254 on Ethernet 0
admin:
admin:show hardware
HW Platform       : VMware Virtual Machine (Unsupported Platform)
Processors        : 2
Type              : Intel(R) Xeon(R) CPU E5-2609 0 @ 2.40GHz
CPU Speed         : 2400
Memory            : 6144 MBytes
Object ID         :
OS Version        : UCOS 3.0.0.0-73
Serial Number     : VMware-56 4d aa 54 3b ee 93 c2-c4 91 ac eb be 6b f8 ec
RAID Version      :
Firmware version not known
BIOS Information :
Vendor: Phoenix Technologies LTD
Version: 6.00
Release Date: 09/21/2011
RAID Details      :
RAID not configured
admin:

Hi Anis
Can you take a look on the below document , please?.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/elmuserguide/9_1_1/license_migration/CUCM_BK_CBF8B56A_00_cucm-license-upgrade-guide_chapter_010.html
1) Perform a DRS backup of the entire cluster
2) Install refresh upgrade Cisco Options Package (COP) file
3) Upgrade to Release 9.1(1)
4) Perform a DRS backup of the entire cluster
5) Create new virtual machines with Release 9.0 OVAs
6) Install Release 9.1(1) using the same hostnames and IP addresses as the physical cluster
7) Restore DRS backup on the entire cluster
8) Verify database replication and consistency
9) Migrate previous licenses into Enterprise License Manager
Thank you
please rate all useful information

New UCS and VMware setup Questions

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
We are currently in the process of migrating out vmware infrastructure from HP to UCS. We are utilizing the Virtual Connect Adapters for the project. With the migration we also plan on implementing the cisco nexus v1000 in our environment. I have demo equipment setup and have had a chance to install a test environment, but still have a few design questions.
When implementing the new setup, what is a good base setup for the virtual connect adapters with the v1000? How many Nics should I dedicate? Right now I run 6 nics per server (2 console, 2 Virtual Machines, and 2 Vmotion). Is this a setup I should continue with going forward? The only other thing I am looking to implement is another set of nics for nfs access. In a previous setup at a different job, we had 10 nics per server (2 console, 4 virtual machines, 2 vmotion and 2 iSCSI). Is there any kind of standard for this setup?
The reason I am asking is I want to get the most out of my vmware environment as we will be looking to migrate Tier 1 app servers once we get everything up and running.
Thanks for the help!

Tim,
Migrating from HP Virtual Connect (VC) -> UCS might change your network design slightly, for the better of course . Not sure if you're using 1G or 10G VC modules but I'll respond as if you've using 10G modules because this is what UCS will provide. VC modules provide a 10G interface that you can logically chop up into a max of 4 host vNIC interfaces totaling 10G. Though it's handy to divide a single 10G interfaces into virtual NICs for Service Console, VMotion, iSCSI etc, this creates the opportunity for wasted bandwidth. The logical NICs VC creates provides a max limit of bandwidth to the adapter. For example if create a 2GB interface for your host to use for vMotion, then 2G of your 10G pipe is wastes when there's no vMotions taking place!
UCS & 1000v offer a different solution in terms of bandwidth utilization by means of QoS. We feel it's more appropriate to specifiy a "minimum" bandwidth guarantee rather than a hard upper limit - leading to wasted pipe. Depending on which UCS blade and mezz card option you have, the # of adapters you can present to the Host varies. B200 blades can support one mezz card (with 2 x 10G interfaces) while the B250 and B440 are full width blades and support 2 Mezz cards. In terms of Mezz cards now, there's the Intel/Emulex/Qlogic/Broamcom/Cisco VIC options. In my opinion the M81KR (VIC) is best suited for virtualized environments as you can present up to 56 virtual interfaces to the host, each having various levels of QoS applied. When you roll the 1000v into the mix you have a lethal combination of adding some of the new QoS features that automatically match traffic types such as Service Console, iSCSI, VMotion etc. See this thread for a list/explanation of new features coming in the next verison of 1000v due out in a couple weeks https://www.myciscocommunity.com/message/61580#61580
Before you think about design too much, tell us what blades & adapters you're using and we can offer some suggestions for setting them up in the best configuration for your virtual infrastructure.
Regards,
Robert
BTW - Here's a couple Best Practice Guides with UCS & 1000v that you might find useful.

Problem with the new server UCS C220 for set IP to CIMC

Hi
We’ve a problem with the new server UCS C220.
We bought two servers UCS C220 M3 for CallManager 8.6 with High Availability.
When we turn on the server during the boot and when it tells us, oppress F8 to enter at the CIMC and set the IP. But it never enters at the CIMC.
Then, we configure our DHCP server and our switch, we connect the three gigabyte ports to our switch to give him an IP to the CIMC, so and then can enter via browser, but neither works.
Note. The dedicated management NIC does not link, the other two ports do make link.
What do you suggest to put an IP to CIMC and start installing our applications?
regards

You may have noticed that there is no DVD rom on the c220. What you need to do is:
Login into the CIMC from your browser
Luanch the KVM
Insert the VMware DVD in your machines drive
On the KVM pop up there should be a tab to mount the drive, after mounting it click on Macros and choose ctrl_alt+delete to restart.
After the VMware OS installs press F2 to enter IP.
Browse to the VMware ip to download the Vsphere client
Open the Vsphere client, enter the ip of the vmware and the username will be root and no password if you did not set one.
You can now upload OVA templates or manually create virtua machine from this enviroment.
Hope this help

How to sync clock of Cisco ASA 5505 from NTP Server on internet

Hi there!
i've setup a site, with cisco ASA 5505. It has public ip also.
i want to sync the clock of firewall from on ntp server on internet, or with internal domain controller that is inside LAN.
The firewall has public IP also.
how can i do this?
Regards!

Hello Lasandro,
This should do it!
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/basic_hostname_pw.html#wp1236530
Looking for some Networking Assistance?
Contact me directly at [email protected]
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com

NTP on UCS Mngr.

Similar Messages

Maybe you are looking for