NTP Synchronization lost in PIX515e

Unanswered Question
Sep 26th, 2010
User Badges:

dears,


i am getting the following error



NTP: xmit packet to x.x.x.x:

leap 3, mode 3, version 3, stratum 0, ppoll 1024

rtdel 0000 (0.000), rtdsp 10400 (1015.625), refid 00000000 (0.0.0.0)

ref 00000000.00000000 (08:28:16.000 EEST Thu Feb 7 2036)

org d049ac31.2575b988 (13:25:37.146 EEST Sun Sep 26 2010)

rec d049b9f4.4b7ed540 (14:24:20.294 EEST Sun Sep 26 2010)

xmt d049bdf4.4eefe01e (14:41:24.308 EEST Sun Sep 26 2010)

Authentication key 1

NTP: rcv packet from x.x.x.x to 10.210.50.1 on inside:

leap 0, mode 4, version 3, stratum 2, ppoll 1024

rtdel 3ba6 (233.002), rtdsp 1f627 (1961.533), refid ac10017b (y.y.y.y)

ref d04992d4.0144caa3 (11:37:24.004 EEST Sun Sep 26 2010)

org d049bdf4.4eefe01e (14:41:24.308 EEST Sun Sep 26 2010)

rec d049b031.33fe4fee (13:42:41.203 EEST Sun Sep 26 2010)

xmt d049b031.3435e698 (13:42:41.203 EEST Sun Sep 26 2010)

inp d049bdf4.4f6f86b1 (14:41:24.310 EEST Sun Sep 26 2010)

NTP: Authentication key 1

NTP: x.x.x.x: offset -3523.105798253, delay 0.00110, error 0.01563

NTP: clock_filter(x.x.x.x, -3523.105798, 0.00110, 0.01563)

NTP: nlist 0, allow 0, found 0, low 0.000000, high 0.000000

NTP: no select intersection

NTP: synchronization lost


any advise??

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jennifer Halim Sun, 09/26/2010 - 05:16
User Badges:
  • Cisco Employee,

What version is your PIX firewall? and was NTP synchronization working before? Can you also check if there is any failover between the PIX firewalls?

MohamedCSE Sun, 09/26/2010 - 05:24
User Badges:

dear Jeniffer,



  • PIX Version is 8.0(4)
  • yes it was working before, before upgrading PIX OS Version from 7.21 to 8.04
  • yes there is failover and hereunder is the output from sh failover command



Pix# sh failover

Failover On

Cable status: Normal

Failover unit Primary

Failover LAN Interface: N/A - Serial-based failover enabled

Unit Poll frequency 3 seconds, holdtime 9 seconds

Interface Poll frequency 5 seconds, holdtime 25 seconds

Interface Policy 1

Monitored Interfaces 5 of 250 maximum

failover replication http

Version: Ours 8.0(4), Mate 8.0(4)

Last Failover at: 02:03:54 EEST Jan 1 1993


thanks in advance

Jennifer Halim Sun, 09/26/2010 - 17:25
User Badges:
  • Cisco Employee,

Can we also find out what is the NTP source? Has it changed? If it does what is the changes? What is the OS of the NTP source/server?

Have you tried to use other NTP server?

Actions

This Discussion