<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic RE: NAC time not correct in Network Architecture &amp; Design</title>
    <link>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13352#M756</link>
    <description>So your NACs are also in the same subnet 10.20.99.0 or in another one with a firewall in between.&lt;BR /&gt;
Could you run the command  ntpq -p and post the output.&lt;BR /&gt;
&lt;BR /&gt;
Thx,&lt;BR /&gt;
Ron</description>
    <pubDate>Mon, 19 May 2014 00:59:00 GMT</pubDate>
    <dc:creator>Ronald_Dvorak</dc:creator>
    <dc:date>2014-05-19T00:59:00Z</dc:date>
    <item>
      <title>NAC time not correct</title>
      <link>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13351#M755</link>
      <description>at 10 NAC's, all within the same subnet the customer register time differences from some minutes to 8 hours.&lt;BR /&gt;
on tuesday these NAC's are updated from version 5.0 to 5.1 and rebootet. &lt;BR /&gt;
the following NAC config is from the installation wizzard and the NTP server reacheble...&lt;BR /&gt;
I need some hints how to debug this and how to find the source of the problem...&lt;BR /&gt;
&lt;BR /&gt;
# Sample&lt;BR /&gt;
/etc/ntp.conf: Configuration file for ntpd.    #&lt;BR /&gt;
&lt;BR /&gt;
    #  Undisciplined Local Clock. This is a fake driver intended for backup&lt;BR /&gt;
&lt;BR /&gt;
    # and when  no outside source of synchronized time is available. The&lt;BR /&gt;
&lt;BR /&gt;
    # default  stratum is usually 3, but in this case we elect to use stratum&lt;BR /&gt;
&lt;BR /&gt;
    # 0. Since  the server line does not have the prefer keyword, this driver&lt;BR /&gt;
&lt;BR /&gt;
    # is never  used for synchronization, unless no other other&lt;BR /&gt;
&lt;BR /&gt;
    #  synchronization source is available. In case the local host is&lt;BR /&gt;
&lt;BR /&gt;
    #  controlled by some external source, such as an external oscillator or&lt;BR /&gt;
&lt;BR /&gt;
    # another  protocol, the prefer keyword would cause the local host to&lt;BR /&gt;
&lt;BR /&gt;
    # disregard  all other synchronization sources, unless the kernel&lt;BR /&gt;
&lt;BR /&gt;
    #  modifications are in use and declare an unsynchronized condition.&lt;BR /&gt;
&lt;BR /&gt;
    #&lt;BR /&gt;
&lt;BR /&gt;
    fudge  127.127.1.0 stratum 10&lt;BR /&gt;
&lt;BR /&gt;
    #server  pool.ntp.org&lt;BR /&gt;
&lt;BR /&gt;
     &lt;BR /&gt;
&lt;BR /&gt;
    #&lt;BR /&gt;
&lt;BR /&gt;
    # Drift  file. Put this in a directory which the daemon can write to.&lt;BR /&gt;
&lt;BR /&gt;
    # No  symbolic links allowed, either, since the daemon updates the file&lt;BR /&gt;
&lt;BR /&gt;
    # by  creating a temporary in the same directory and then rename()'ing&lt;BR /&gt;
&lt;BR /&gt;
    # it to the  file.&lt;BR /&gt;
&lt;BR /&gt;
    #&lt;BR /&gt;
&lt;BR /&gt;
    driftfile  /etc/ntp/drift&lt;BR /&gt;
&lt;BR /&gt;
    multicastclient  # listen on default 224.0.1.1&lt;BR /&gt;
&lt;BR /&gt;
    broadcastdelay  0.008&lt;BR /&gt;
&lt;BR /&gt;
     &lt;BR /&gt;
&lt;BR /&gt;
    #&lt;BR /&gt;
&lt;BR /&gt;
    # Keys  file. If you want to diddle your server at run time, make a&lt;BR /&gt;
&lt;BR /&gt;
    # keys file  (mode 600 for sure) and define the key number to be&lt;BR /&gt;
&lt;BR /&gt;
    # used for  making requests.&lt;BR /&gt;
&lt;BR /&gt;
    # PLEASE DO  NOT USE THE DEFAULT VALUES HERE. Pick your own, or remote&lt;BR /&gt;
&lt;BR /&gt;
    # systems  might be able to reset your clock at will.&lt;BR /&gt;
&lt;BR /&gt;
    #&lt;BR /&gt;
&lt;BR /&gt;
    #keys  /etc/ntp/keys&lt;BR /&gt;
&lt;BR /&gt;
    #trustedkey  65535&lt;BR /&gt;
&lt;BR /&gt;
    #requestkey  65535&lt;BR /&gt;
&lt;BR /&gt;
    #controlkey  65535&lt;BR /&gt;
&lt;BR /&gt;
     &lt;BR /&gt;
&lt;BR /&gt;
    # Don't  serve time or stats to anyone else by default (more secure)&lt;BR /&gt;
&lt;BR /&gt;
    restrict  default noquery nomodify&lt;BR /&gt;
&lt;BR /&gt;
    # Trust  ourselves. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;BR /&gt;
&lt;BR /&gt;
    restrict 127.0.0.1&lt;BR /&gt;
&lt;BR /&gt;
     &lt;BR /&gt;
&lt;BR /&gt;
    #ntp enabled&lt;BR /&gt;
&lt;BR /&gt;
    server 10.20.99.222&lt;BR /&gt;
&lt;BR /&gt;
server 10.20.99.223&lt;BR /&gt;
&lt;BR /&gt;
    &lt;BR /&gt;
&lt;BR /&gt;
     &lt;BR /&gt;
&lt;BR /&gt;</description>
      <pubDate>Fri, 16 May 2014 19:08:00 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13351#M755</guid>
      <dc:creator>D_Kotte</dc:creator>
      <dc:date>2014-05-16T19:08:00Z</dc:date>
    </item>
    <item>
      <title>RE: NAC time not correct</title>
      <link>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13352#M756</link>
      <description>So your NACs are also in the same subnet 10.20.99.0 or in another one with a firewall in between.&lt;BR /&gt;
Could you run the command  ntpq -p and post the output.&lt;BR /&gt;
&lt;BR /&gt;
Thx,&lt;BR /&gt;
Ron</description>
      <pubDate>Mon, 19 May 2014 00:59:00 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13352#M756</guid>
      <dc:creator>Ronald_Dvorak</dc:creator>
      <dc:date>2014-05-19T00:59:00Z</dc:date>
    </item>
    <item>
      <title>RE: NAC time not correct</title>
      <link>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13353#M757</link>
      <description>Problem solved ...&lt;BR /&gt;
some NAC devices use different timezones and at some NAC's the NTPD is not running.&lt;BR /&gt;
I correct the TZ settings and start the NTPD ... now i have a consistent time over all devices.&lt;BR /&gt;
&lt;BR /&gt;
@Ronald Dvorak: at the devices with dead NTPD the "ntpd -p" command results in "connection rejected" ... that was a great help to find the error. THX!&lt;BR /&gt;
&lt;BR /&gt;</description>
      <pubDate>Wed, 21 May 2014 11:47:00 GMT</pubDate>
      <guid>https://community.extremenetworks.com/t5/network-architecture-design/nac-time-not-correct/m-p/13353#M757</guid>
      <dc:creator>D_Kotte</dc:creator>
      <dc:date>2014-05-21T11:47:00Z</dc:date>
    </item>
  </channel>
</rss>

