topic Re: XIQ-SE as NTP server in ExtremeCloud IQ- Site Engine Management Center

XIQ-SE as NTP server

EF — Mon, 20 Jan 2025 07:52:30 GMT

Hi Team,

I followed this KB:

How To: How to enable NTP on XMC/XIQ-SE to act as time server for switches | Extreme Portal

But VSP are not able to sync time, reason "Unreachable" server, but no Firewall between them so must be a missconfig on server.

XIQ-SE rel 24.10.

Any idea? Some one did it before?

Best!!

Re: XIQ-SE as NTP server

EF — Mon, 20 Jan 2025 09:06:09 GMT

Upps teh server works:

Something in VSP?

VSP:1#show ntp statistics
************************************************************************************
Command Execution Time: Mon Jan 20 02:13:53 2025 CET
************************************************************************************

NTP Server : 172.XX.XX.XX
------------------------------------------
Stratum : 16
Version : NTPv4
Broadcast : No
Auth Enabled : Disabled
Auth Status : Not-Auth
Sync Status : Discarded-not valid
Reachability : Unreachable
Root Delay : 0.000
Root Disp : 0.000
Delay : 0.000
Dispersion : 15937.500
Offset : 0.000
Precision : -23
Jitter : 0.000
Last Event : Mobilize

Re: XIQ-SE as NTP server

Yoann_Jonard — Mon, 20 Jan 2025 11:19:16 GMT

what's the status of the chrony service in xiq-se ?

Re: XIQ-SE as NTP server

EF — Mon, 20 Jan 2025 15:34:58 GMT

Hi Yoann

It´s running

Re: XIQ-SE as NTP server

Yoann_Jonard — Mon, 20 Jan 2025 16:56:09 GMT

yes sorry the server wouldn't have sent the NTP response if it wasn't running.

Do you have "ntp restrict" on the switch ? Or another ACL that would prevent the switch from receiving the response ?

Could you share a "show ntp" please ?

Regards,

Re: XIQ-SE as NTP server

EF — Tue, 21 Jan 2025 11:44:22 GMT

Of course

Re: XIQ-SE as NTP server

Yoann_Jonard — Tue, 21 Jan 2025 12:30:33 GMT

What about the ntp restrict and the ACL ?

Re: XIQ-SE as NTP server

EF — Tue, 21 Jan 2025 15:33:05 GMT

No access-policy enable and the only config lines are:

ntp sever W.X.Y.Z

ntp

Re: XIQ-SE as NTP server

Yoann_Jonard — Tue, 21 Jan 2025 17:04:16 GMT

Ok, I don't know then sorry...

Open a case and keep us posted.

Re: XIQ-SE as NTP server

Robert_Haynes — Tue, 21 Jan 2025 18:31:05 GMT

Based on what I know of chrony the combination of stratum (how many hops are we away from a reliable 'local' clock source) and the dispersion / epsilon will determine whether or not a server, reachable or not, is declared unreliable/unreachable for synchronization purposes.

If you're that curious as to why, trace the NTP exchanges when you turn on NTP between client and server.

FWIW, while there is a KB article on this XIQ-SE is technically not configured to be a NTP server. If 'dateconfig' is ran at any time customized settings of this nature will be lost. NTP should point to a more reliable clock source than the SE VM hosted on a hypervisor which is by its nature subject to clock drift.

Re: XIQ-SE as NTP server

EF — Tue, 21 Jan 2025 19:49:09 GMT

This is an isolate deploy so I don't have any other possibility as clock source.

As idea maybe this KB mut be removed to avoid confusion or add a deep explanation of the problem to use it.

Thank you both for your answers.