NTP problem on PIX 515E with 8.0(4)16

santipongv · ‎01-12-2009

I upgraded IOS on PIX 515E from ASA image 7.2(4) to PIX image 8.0(4)16. NTP statement disappeared. I tried to add NTP statement back, but got the following error messages:

Firewall(config)# ntp server 10.3.1.3

vPif_getVpif: bad vPifNum(0xffff) from B6F781 from 560BE7

UDP: ERROR - socket <unknown> 31488 in used

ERROR: Could not open udp/65535/123 for NTP

ERROR: failed to initialize NTP process

How can I resolve this problem? Thank you in advance.

m.sir · ‎01-12-2009

It looks you are hitting bug CSCsk75944

from

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?caller=pluginredirector&method=fetchBugDetails&bugId=CSCsk75944

ASA configuration of NTP - NTP process fails to initialise

Symptom:

Error when configuring NTP on ASA version 8.0(2).

# conf t

(config)# ntp server 10.12.6.119

vPif_getVpif: bad vPifNum(0xffff) from 87D5A11 from 8147AE8

UDP: ERROR - socket 31488 in used

ERROR: Could not open udp/65535/123 for NTP

ERROR: failed to initialize NTP process

(config)#

Conditions:

ASA 8.0(2)

Workaround:

Unknown

:(((

santipongv · ‎01-12-2009

Does this apply to the PIX image 8.0(4)16?

Pravin Phadte · ‎01-12-2009

did u try withjust ntp and ip address or did u also tried with

ntp server 10.x.x.x source inside/outside ect.

also source has sub command which u can check.

santipongv · ‎01-12-2009

I did try all combinations and got the same error message.

santipongv · ‎01-12-2009

Interestingly, I don't have NTP problem on another 515E with the same code (8.0(4)16) on it. Any thoughts?

Pravin Phadte · ‎01-12-2009

Hmm thats not a good thing. Then it seems that it should not be the pix ios problem.

What about u r network any acl blocking port for NTP 123 ?

Any anything from the network side where the ntp server is configued is blocking this ip ?

that would be my only thoughts now

PIX is getting bad...

santipongv · ‎01-12-2009

UDP 123 is allowed. Thank you for your inputs.