Which IP address to give NTP Server IP in CUCM8 Installation?

Hello Friends,
I am installing CUCM8.0(3) in the lab in one of the VMs in the VMware ESXi Server, I got struck in giving NTP Server IP address in the Installation.
Could you please let me know which IP address I should give during installation?
I have CUCM71 in the lab , I tried giving this box IP address as NTP but its not supporting.
If anyone has done this before and know or suggest me, it is very appreciated. Thanks.

Hi Suryanarayana Chintu,
You have to install an NTP server on a saperate box, or use the existining NTP servers in your lab if any and provide this ip address to proceed further as part of this installation.
Hope it helps.
Anand
Please rate helpful posts !!

Similar Messages

How to load a comma seprated text file which contain address in to sql server table using ssis package

Hi,
I want to load a file which is comma separated and contain address .Problem is that address its self comma seprated so how do I differenciate whether comma used for column seprator or it used in address.
for eg.
One person having address like
"c/o AB corp,156 cross lane,USA"
Thanks.....

Hi SR_MCTS,
Based on your description, you want to distinguish a comma is used for column separator or used in address column in a text file, then load the data from the text file to SQL Server table.
As per my understanding, if you can replace the comma column separator to another delimiter like semicolon (;), just do it. Then we can select Semicolon {;} as Column delimiter for the Flat File Connection Manager. Or ensure all columns are enclosed in double
quotes ("). Then we can set the double quotes (") as Text qualifier for the Flat File Connection Manager, and the commas will be loaded as part of the string fields.
If you can't have that done, because computers don't know the context of the data, you would have to come up with some kind of rules that decides when a comma represents a delimiter, and when it is just part of the text. I think a custom script component
would be necessary to pre-process the data, identify where a comma is part of an address, and then treat that as one field.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

NTP server unreachable through ASA firewall

Hi all,
I've configured a DMZ switch to point to an NTP server on on the Inside, but I get a debug message on the switch that says:
NTP: <NTP server IP address> unreachable
I'm confident that the NTP server is configured properly, as there are more than a dozen other hosts using it, successfully. The difficulty here is that the NTP packets are having to flow from the DMZ to the Inside. I have a rule set on the firewall that permits the IP address of the switch to connect to the IP address of the NTP server as follows:
access-list intdmz1_acl extended permit udp host <IP address of switch> host <IP address of NTP server> eq ntp
I can see the hit counter on this rule incrementing.
The firewall can ping the NTP server, and the NTP server can ping the switch, so I think routing is OK.
Output from the DMZ switch:
switch#show ntp associations
      address         ref clock     st when poll reach delay offset    disp
~192.168.65.254   0.0.0.0          16     -    64    0     0.0    0.00 16000.
* master (synced), # master (unsynced), + selected, - candidate, ~ configured
switch#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 119.2092 Hz, actual freq is 119.2092 Hz, precision is 2**17
reference time is 00000000.00000000 (00:00:00.000 GMT Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
PRNLN-DMZ-SW01#sh run | inc ntp
ntp source Vlan138
ntp server 192.168.65.254
ukhvdc00vs01#sh run | inc ntp
ntp source Vlan65
ntp master 3
ntp update-calendar
ntp server 0.uk.pool.ntp.org
ntp server 1.uk.pool.ntp.org
PRNLN-DMZ-SW01#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 119.2092 Hz, actual freq is 119.2092 Hz, precision is 2**17
reference time is 00000000.00000000 (00:00:00.000 GMT Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
Does the firewall rule need to permit more than UDP/123 for this to work perhaps?
NTPconfig on DMZ switch:
switch#sh run | inc ntp
ntp source Vlan138
ntp server <IP address of NTP server>
===================
NTP config on NTP server:
NTP_Server#sh run | inc ntp
ntp source Vlan65
ntp master 3
ntp update-calendar
ntp server 0.uk.pool.ntp.org
ntp server 1.uk.pool.ntp.org
Any guidance welcomed.
Thank you,
Olly

Hi Julio,
Hi Julio,
For the purposes of this information:
DMZ switch IP = 5.6.7.8
NTP server IP = 10.1.1.1
Here's the output from the show commands:
ciscoasa# show capture NTPCAPTUREDMZ
11 packets captured
   1: 16:22:05.271500 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   2: 16:23:09.276185 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   3: 16:24:13.274033 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   4: 16:24:57.272813 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   5: 16:24:58.279480 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   6: 16:24:59.277817 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   7: 16:25:00.275971 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   8: 16:25:01.275559 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
   9: 16:25:02.272599 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
10: 16:25:03.279129 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
11: 16:25:04.277710 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
11 packets shown
ciscoasa# show capture NTPCAPTUREINSIDE
0 packet captured
0 packet shown
ciscoasa# show capture NTPASP | include 10.1.1.1
419: 16:24:13.274171 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
1820: 16:24:57.272904 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
1841: 16:24:58.279587 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
1876: 16:24:59.277909 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
1934: 16:25:00.276062 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2027: 16:25:01.275651 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2068: 16:25:02.272690 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2095: 16:25:03.279221 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2129: 16:25:04.277802 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2200: 16:25:05.275849 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2233: 16:25:06.274094 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2275: 16:25:07.273606 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2327: 16:25:08.280182 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2347: 16:25:09.277222 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2373: 16:25:10.275467 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2399: 16:25:11.273759 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
2414: 16:25:12.273347 802.1Q vlan#138 P6 5.6.7.8.123 > 10.1.1.1.123: udp 48
I'm guessing we should see some packets in the second capture, but we're not...
Does this help?
Thanks!
Olly

NTP Server IP Address ?

Hi,
I have configured a Cisco 6509 core switch as a NTP master and allowed all my access switches to get their time synchronised with the core switch. Now, I want to configure the core switch to get itself synchronised with other public NTP server which would be reliable and genuine as our organisation is serving for healthcare. One of my friend has told me to use these IPs 128.249.1.1 or 128.2.136.71 as a NTP Server in the core switch. Should I use them?
Is Cisco recommends any Public IP for NTP Server synchronisation? Please suggest.
Thanks & Regards,
Anil K.

Disclaimer: I have no affiliation with Cisco in any way except where I work, we use some Cisco products (sw/hw). So take it however you will.
Personally, I would rather adopt the following approach suggested at http://www.pool.ntp.org/en/use.html, than hardcoding a couple of public NTP servers in a remote region:
"As pool.ntp.org will assign you timeservers from all over the world, time quality will not be ideal. You get a bit better result if you use the continental zones (For example europe, north-america, oceania or asia.pool.ntp.org), and even better time if you use the country zone (like ch.pool.ntp.org in Switzerland) - for all these zones, you can again use the 0, 1 or 2 prefixes, like 0.ch.pool.ntp.org. Note, however, that the country zone might not exist for your country, or might contain only one or two timeservers. If you know timeservers that are really close to you (measured by network distance, with traceroute or ping), time probably will be even better. "
Of course, if time sync is REALLY that important, one might consider buying/installing commercial GPS-based NTP appliances. That's not what you're looking for, obviously.

7.4.1 fails "No Address for NTP server"

Did all the upgrades to Airport utility and firmware but couldn't get the AEBS to recognise a valid IP address even though it has leased one. In addition, I looked at the logs and saw the error message 'No Address for NTP server'. The issue was solved by reverting, but 7.4.1 has made my AEBS inoperable.

Thanks for your replies, much appreciated.

How to diagnose NTP server problem during boot-up?

We're having a problem on our campus network where Macs aren't able to use the time.apple.com NTP server to correct the time during boot-up. Once the user logs in, open the Date & Time pref pane causes the time to be corrected.
I've noticed this problem for quite a while but it's really been just a minor inconvenience. Then some users started using Boot Camp and it became a bigger inconvenience because their Mac time is wrong by 4 hours when they return to OS X from Windows XP. It has now become something that we need to address because we have set up a lab with iMacs all configured with Boot Camp and set up to authenticate off of our Active Directory server, which requires that the time be correct on the iMacs when the user tries to log in.
We'd like to monitor the network traffic on Mac during boot-up to see if we can figure out why this is happening. My person theory is that something that the network admins have the network configured to do when it first sees a new computer is causing enough of a delay in the DHCP process that the Mac doesn't have a network connection when the NTP server call would normally be made. The college has a DSL line that is not part of our network and NTP server time correction works correctly on it.
We're looking for the best way to capture the activity on the Mac and the network traffic at boot-up. Here are the things that we're looking into.
1) Verbose mode - Interesting looking but it goes by pretty quickly and I don't have time to read all of that info. Is this recorded in a log automatically somewhere or is there a way to capture this info?
2) Single user mode - I haven't been able to determine whether the NTP server call should have occurred by the time I get a prompt in Single User Mode. If so, is there a command I could use here that would give me a dump of activity and network traffic up to this point?
3) I have Interarchy which will let me record network traffic but as far as I can tell there's isn't a way to use this feature during boot-up. Am I wrong about that?
4) Someone suggested using Ethereal which appears to require Fink when installed. I can't tell if this will work during boot for if it's an app that I can only run after logging in (like Interarchy). Does anyone know how this works?
Any suggestions would be welcomed.
-McD-

Turns out it was a network timing issue. The DHCP server wasn't providing the IP address quick enough (never figured out why, though).

How to use a ip address for pop & smtp server names when creating a new account

My xp PC is on a lan behind a Freebsd os [IE. flavor of unix] which is not running a dns server. The only way to reach it is by ip address. I have configured the account with a ip address for pop & smtp. When I create and sent a email, Thunderbird shows a window saying it trying to connect and after 10 seconds it goes away with out showing the status window. There is no email in the sent folder. Is it possible to do this ???? I can accomplish this using ms/outlook so I know it is possible.

I haven't tried this in years, but could you give this server a name and enter that into TB
Then in C:\Windows\System32\drivers\etc\hosts you add that name and ip

ASA5500 using Windows 7 computer as NTP server

I have an ASA5510 connected to a computer running Windows 7 (the NTP Server) on its "inside" interface.
Using the ASDM, I have configured the ASA5510 to use the Windows 7 as its NTP server (my architecture forces me to use a local machine as an NTP server):
     -IP address: 192.0.99.1 (the ASA5510 has an IP address of 192.0.99.40)
     -Interface: inside
     -Key number: None
     -Enable NTP authentication: no.
I have other Windows computers on the "inside" interface using the NTP Server, so NTP traffic is relayed without any problem. But somehow, the ASA5510 is not able to synchronize with the NTP Server.
I see the following log entry:
     -Source IP: 192.0.99.1
     -Source Port: 123
     -Destination IP: 192.0.99.40
     -Destination port: 65535
     -Description: Teardown UDP connection 3905 for inside: 192.0.99.1/123 to identity: 192.0.99.40/65535 duration 0:02:01 bytes 96
so it seems like the ASA5510 sends a request to the NTP Server, but I am not sure whether the reply doesn't get processed correctly, or the connection stays open too long (my UDP connection timeout is the default, 2 minutes).
I had trouble getting SonicWALL NSA2400s to use Windows 7 devices as NTP servers. I had to get a firmware version where there was no MD5 authentication (which I think is OK in this case), and change a setting in the Windows registry (HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/services/W32Time/Config/AnnounceFlags: from 0xa to 0x5)
any insight is welcome.
Pedro

I have turned on all ntp debugging, and run "show ntp status" and "show ntp assoc":
CCG-SHIP-FWL(config)# show debug
debug ntp adjust enabled at level 1
debug ntp authentication enabled at level 1
debug ntp events enabled at level 1
debug ntp packets enabled at level 1
debug ntp params enabled at level 1
debug ntp select enabled at level 1
debug ntp sync enabled at level 1
debug ntp validity enabled at level 1
CCG-SHIP-FWL(config)# show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 99.9984 Hz, actual freq is 99.9984 Hz, precision is 2**6
reference time is 00000000.00000000 (06:28:16.000 GMT Thu Feb 7 2036)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
CCG-SHIP-FWL(config)# show ntp assoc
      address         ref clock     st when poll reach delay offset    disp
~192.16.99.1      .LOCL.            1   380 1024 337    73.0 255671    71.0
* master (synced), # master (unsynced), + selected, - candidate, ~ configured
CCG-SHIP-FWL(config)# NTP: xmit packet to 192.16.99.1:
leap 3, mode 3, version 3, stratum 0, ppoll 1024
rtdel 0000 (0.000), rtdsp 10400 (1015.625), refid 00000000 (0.0.0.0)
ref 00000000.00000000 (06:28:16.000 GMT Thu Feb 7 2036)
org d34ac42f.4609d99d (20:21:03.273 GMT Tue May 1 2012)
rec d34a6050.3598360c (13:14:56.209 GMT Tue May 1 2012)
xmt d34a6250.22e73ba2 (13:23:28.136 GMT Tue May 1 2012)
NTP: rcv packet from 192.16.99.1 to OWN_FWL_LAN_PORT on inside:
leap 0, mode 4, version 3, stratum 1, ppoll 1024
rtdel 0000 (0.000), rtdsp a0bf4 (10046.692), refid 4c4f434c (76.79.67.76)
ref d34abbb0.bb426e39 (19:44:48.731 GMT Tue May 1 2012)
org d34a6250.22e73ba2 (13:23:28.136 GMT Tue May 1 2012)
rec d34ac62f.3977adb6 (20:29:35.224 GMT Tue May 1 2012)
xmt d34ac62f.3977adb6 (20:29:35.224 GMT Tue May 1 2012)
inp d34a6250.233258a0 (13:23:28.137 GMT Tue May 1 2012)
NTP: nlist 0, allow 0, found 0, low 0.000000, high 0.000000
NTP: no select intersection
NTP: synchronization lost

NTP Server behind CSS / Responses from outside don't get through

I have a CSS and behind it an NTP-Server (simulated for this posting by the ntpdate-command:
First, when I use ntpdate -q 128.130.2.7 (with the -q parameter a source-port >1024 is used) all wents fine, I get a response and the flow trace-ip shows:
JAN 20 10:12:15 1/1 1187 FLOWMGR-4: UDP in 192.168.7.73:35700->128.130.2.7:123
JAN 20 10:12:15 1/1 1188 FLOWMGR-4: UDP out 128.131.2.73:4724->128.130.2.7:123
JAN 20 10:12:15 1/1 1189 FLOWMGR-4: UDP in 128.130.2.7:123->128.131.2.73:4724
JAN 20 10:12:15 1/1 1190 FLOWMGR-4: UDP out 128.130.2.7:123->192.168.7.73:35700
But when I now use ntpdate 128.130.2.7 without the -q option, i.e. well known Source Port 123 is used, no response come through and the trace-ip shows:
JAN 20 10:13:20 1/1 1194 FLOWMGR-4: UDP in 192.168.7.73:123->128.130.2.7:123
JAN 20 10:13:20 1/1 1195 FLOWMGR-4: UDP out 128.131.2.73:123->128.130.2.7:123
JAN 20 10:13:20 1/1 1196 FLOWMGR-4: UDP in 128.130.2.7:123->128.131.2.73:123
JAN 20 10:13:21 1/1 1197 FLOWMGR-4: UDP in 128.130.2.7:123->128.131.2.73:123
JAN 20 10:13:22 1/1 1198 FLOWMGR-4: UDP in 128.130.2.7:123->128.131.2.73:123
JAN 20 10:13:23 1/1 1199 FLOWMGR-4: UDP in 128.130.2.7:123->128.131.2.73:123
i.e. 128.130.2.7 sends the response to the vip-address and the css receives it, but does not send it to the requesting server.
The relevant configuration parts are (currently ACL is disabled!):
!************************** CIRCUIT **************************
circuit VLAN602
ip address 128.131.2.101 255.255.255.0
ip virtual-router 102 priority 254 preempt
ip redundant-vip 102 128.131.2.72 shared
ip redundant-vip 102 128.131.2.73 shared
ip redundant-vip 102 128.131.2.3 shared
ip critical-service 102 gw-128.131.2
!*************************** GROUP ***************************
group ogawa2
add service ogawa2i
vip address 128.131.2.73
active
!************************** SERVICE **************************
service ogawa2i
ip address 192.168.7.73
active
It looks like, that the response does not comes through, if the source-port of the requesting server uses a port <1024.
Any ideas ??

There are some ports for which we do not maitain flow information but 123 should not be one of them.
What software version are you using ?
A workaround could be to create the following content rules :
owner TEST
content NTP
vip address 128.131.2.73
protocol udp
port 123
add service ogawa2i
active
Let me know if this works.
Gilles.

Microsoft Windows Server 2003 as NTP server for IOS clients

I am trying to synchronize the clock in my switches using a Windows 2003 ntp server. Debugging shows that the switch receives an answer from the server, but will not accept it. Debugging shows "Failed validity tests 20" which I think means "bogus packet received".
On the server side I have changed the registry key HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\LocalClockDispersion from the default value 10 to 0, found that tip on the web. I also adjusted the switch clock manually so that the difference was less than a minute. Did not help.
I am currently testing with a 2960G with IOS 12.2(25)SEE3
Here is the debug output: (ntp events, ntp packets, ntp validity)
May 14 16:07:25: NTP: xmit packet to <server ip address> :
May 14 16:07:25: leap 3, mode 3, version 3, stratum 0, ppoll 64
May 14 16:07:25: rtdel 0000 (0.000), rtdsp 10001 (1000.015), refid 00000000 (0.0.0.0)
May 14 16:07:25: ref 00000000.00000000 (01:00:00.000 CET Mon Jan 1 1900)
May 14 16:07:25: org CBD57216.A8000000 (16:13:42.656 CEST Wed May 14 2008)
May 14 16:07:25: rec CBD5705D.5075BD5A (16:06:21.314 CEST Wed May 14 2008)
May 14 16:07:25: xmt CBD5709D.515717A2 (16:07:25.317 CEST Wed May 14 2008)
May 14 16:07:25: NTP: rcv packet from <server ip address> to <switch ip address> on Vlan5:
May 14 16:07:25: leap 3, mode 4, version 3, stratum 0, ppoll 64
May 14 16:07:25: rtdel 0000 (0.000), rtdsp 10400 (1015.625), refid 00000000 (0.0.0.0)
May 14 16:07:25: ref CBBA0238.40395810 (20:45:12.250 CEST Wed Apr 23 2008)
May 14 16:07:25: org CBD5709D.515717A2 (16:07:25.317 CEST Wed May 14 2008)
May 14 16:07:25: rec CBD57256.AC000000 (16:14:46.671 CEST Wed May 14 2008)
May 14 16:07:25: xmt CBD57256.AC000000 (16:14:46.671 CEST Wed May 14 2008)
May 14 16:07:25: inp CBD5709D.56C08EFA (16:07:25.338 CEST Wed May 14 2008)
May 14 16:07:25: NTP: packet from <server ip address> failed validity tests 20
May 14 16:07:25: Peer/Server Clock unsynchronized

Nothing much in the switch, just
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
ntp server x.x.x.x
At the Windows 2003 server I changed two registry keys, but I think the first one was not needed.
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\LocalClockDispersion changed from 10 to 0
w32tm /config /update
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type="NT5DS"
Restarted Windows time service
Note that NT5DS means that this server will get its time from another domain controller in my domain.
The point is to make sure that time really is synchronized at the server. If you want the server to sync from an external source, consider changing the source to something other than time.windows.com
net time /querysntp and net time /setsntp
Vigleik

Choosing from which email address an ical invitation comes from

I have several email addresses and would like to choose each time from which email address my ical invitation comes from. Now it always comes from my work email address and I definitely do not want that. I went into my card in the address book and saw that my work email address was the top email address so I deleted that and entered it in again, hoping it would then be at the bottom but no, as soon as I saved my contact card the work email address sneaked up to the top.
How can I choose (without fiddling with the contact card) from which email address my ical invitation comes from?
Hope there is someone out there with a solution

I'm at work so I am not on my Mac but if memory serves me correctly, the email is sent from your default email address which is set in Apple Mail's preferences. Currently, I have my default send address set to "whichever account is selected".
So, in Mail if my MobileMe email address is selected, the invite is sent from MobileMe. If Gmail is selected, Gmail sends the invite.
Give that a try and see if it works.

Linux ntp server with cisco 3850

hi all
i'm trying to make sync with linux ntp with cisco 3850 here is the what i did
linux centos 6.5 (on the ucs virtual machin) . this is a ntp server
ip 10.1.1.251
===================================================
For more information about this file, see the man pages
# ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5).
driftfile /var/lib/ntp/drift
# Permit time synchronization with our time source, but do not
# permit the source to query or modify the service on this system.
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
# Permit all access over the loopback interface. This could
# be tightened as well, but to do so would effect some of
# the administrative functions.
restrict 127.0.0.1
restrict -6 ::1
# Hosts on local network are less restricted.
restrict 10.1.1.0 mask 255.255.255.0 nomodify notrap
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html)
#server 1.centos.pool.ntp.org iburs
#server 2.centos.pool.ntp.org iburst
#server 3.centos.pool.ntp.org iburst
server 127.127.1.0
fudge 127.127.1.0 stratum 2
#broadcast 192.168.1.255 autokey        # broadcast server
#broadcastclient                        # broadcast client
#broadcast 224.0.1.1 autokey            # multicast server
#multicastclient 224.0.1.1              # multicast client
#manycastserver 239.255.254.254         # manycast server
#manycastclient 239.255.254.254 autokey # manycast client
# Enable public key cryptography.
#crypto
includefile /etc/ntp/crypto/pw
# Key file containing the keys and key identifiers used when operating
# with symmetric key cryptography.
keys /etc/ntp/keys
# Specify the key identifiers which are trusted.
#trustedkey 4 8 42
# Specify the key identifier to use with the ntpdc utility.
#requestkey 8
# Specify the key identifier to use with the ntpq utility.
#controlkey 8
# Enable writing of statistics records.
#statistics clockstats cryptostats loopstats peerstats
and cisco 3850 configured this one
ntp server 10.1.1.241
and
show ntp status
clock is unsynchronized, stratum 16, reference is null
why...didn't work.. somebody help me..

Is there a typo in your post or configuration? You show the NTP server IP address as 10.1.1.251, but the router configured to use 10.1.1.241.
Regards

Selection criteria of NTP server

Hi
If 4 x NTP servers are configured on cisco router then what is the criteria that which server cisco picks first ? can some one share the selection criteria of NTP servers, same questions for NTP peer.
Thanks !
Regards,
Umair

Hi,
"In a common client/server model, a client sends an NTP message to one or more servers and processes the replies as received. The server interchanges addresses and ports, overwrites certain fields in the message, recalculates the checksum, and returns the message immediately. Information included in the NTP message allows the client to determine the server time with respect to local time and adjust the local clock accordingly. In addition, the message includes information to calculate the expected timekeeping accuracy and reliability, as well as select the best server."
So in other words "Before synchronizing, NTP compares the time reported by several network devices and does not synchronize with one that is significantly different, even if it is a stratum 1."
You can prefer a server: ntp server prefer
You also can peer NTP servers. If you have two or more peers then the most accurate peer acts as the server and the other peer(s) act as clients.
Here are some helpful commands:
show ntp associations
show ntp status
debug ntp events
debug ntp adjust
debug ntp core
Note: NTP server functionality is supported starting in Cisco NX-OS Release 5.2.
Hope this helps.

Cisco 2821 Router as a NTP Server

We are using a 2821 Router as our boundary router. It has installed into it a 9 port HWIC for layer 2 switching as well as allowing the router to communicate on the Network Management VLAN. All of the devices on the Network Management VLAN are segregated from the managed traffic, which unfortunately also doesn't allow them external NTP services. Can the router be programmed as a NTP server so that all of the network appliances can utilize it for NTP from either it's NM Vlan IP address or from a loopback address? Thanks in advance for the help.

What are the commands needed in the router for it to provide time to other appliances?
If your router has successfully synchronized with an authoritative NTP server? NOT A THING.
In my network, only the site's distribution switch is allowed to go out and get NTP. All other access switch goes to the distribution switch by using the command "ntp server ". You can have multiple NTP server IP address and if you prefer to have a "favorite" you can append your command with the "prefer" option: ntp server prefer.
If you have clients then point their NTP to your router. For troubleshooting, I prefer the command "sh ntp associate". If your NTP server IP address starts with a "*" this is good and means that your NTP is synchronized.
Hope this answers your question.

Does Phone NTP Server reference change my licensed files, (CUCM)?

Hi all,
Good day.
I just wanted to know of on my CUCM Admin web page, on PHONE NTP REFERENCE, if adding or deleting NTP's does make my CUCM to re-host my active licensed files.
Because I changed the NTP server on the CLI call manager, (delete it and added one). And now all my licenses are invalid
I have a few more questions.
Which are the differences between of the Phone NTP Reference Server and NTP reference servers (CLI)?
Which one I do not must change?
If mi licenses say "Invalid", what is the worst case scenario could happen with my current configurations of IP Phones/GW/GK/Trunks/CSS?
Thanks in advice.
John

I assume you are using a UCS server,,,
The license MAC is generated by hashing the following user-configured parameters:
◊ Time zone
◊ NTP server 1 (or ?none?)
◊ NIC speed (or ?auto?)
◊ Hostname
◊ IP Address (or ?dhcp?)
◊ IP Mask (or ?dhcp?)
◊ Gateway Address (or ?dhcp?)
◊ Primary DNS (or ?dhcp?)
◊ SMTP server (or ?none?)
◊ Certificate Information (Organization, Unit, Location, State, Country)
When you change any of the parameters that create the license MAC, the license that you obtained with it becomes invalid. You must request a rehosting of the license to obtain a valid license. The old license continues to work for a 30-day grace period.
To rehost your licenses, you must open a case with the licensing team. Contact the licensing team at [email protected]
During the grace period, you can change the settings back to the licensed values to make your original license valid again. If you need more than 30 days of grace period, change your settings back to the licensed values, then change them back to the new values that you want to use. You will get another 30- day grace period.
Please rate all useful posts
"opportunity is a haughty goddess who waste no time with those who are unprepared"

Which IP address to give NTP Server IP in CUCM8 Installation?

Similar Messages

Maybe you are looking for