×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

How to Sync clock on WLC ISE and AD

Answered Question
Dec 28th, 2013
User Badges:

Hi there,


I am stuck in NTP, deployed WLC CWA using ISE that is integrated with AD. I tried using AD as NTP source but no luck(universal fact that Cisco uses NTP where as Microsoft uses SNTP).


The issue is, if time is not synced between WLC, ISE and AD; web redirection stopped working and no authentication takes place.


I tried installting Meinbergglobal NTP software to distribute time to my Cisco devices. It does work with Cisco devices but it acts as master and do not sync its own time with AD.


I am trying to figure out a way to sync Cisco with Microsoft, is there any way in this world to do so???


Please help..


Thanks in advance           

Correct Answer by Leo Laohoo about 3 years 7 months ago

DO NOT USE MS NTP/SNTP as a valid time source.  MS solution is the WORST method for SNTP/NTP because MS does NOT adhere to NTP/SNTP standards.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Leo Laohoo Sat, 12/28/2013 - 05:02
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

DO NOT USE MS NTP/SNTP as a valid time source.  MS solution is the WORST method for SNTP/NTP because MS does NOT adhere to NTP/SNTP standards.

fahadafzal Sat, 12/28/2013 - 05:05
User Badges:

Thanks for your prompt response.


The company does not want to sync with global NTP servers. Is there any other way to sync clock on all these devices??

Leo Laohoo Sat, 12/28/2013 - 05:29
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

If the company does not want to synchronize with the global NTP servers then the company can get a GPS-based NTP server.

This solution can be costly.

Sent from Cisco Technical Support Nintendo App

fahadafzal Sat, 12/28/2013 - 05:34
User Badges:

You mean I should sync AD and all my cisco devices with global NTP server?


Can you please suggest any reliable NTP server?


Thanks

George Stefanick Sun, 12/29/2013 - 15:07
User Badges:
  • Purple, 4500 points or more
  • Community Spotlight Award,

    Best Publication, October 2015

I have my wlc's sync to my Cisco cats which upstream to out master cisco box. AD syncs to itself. Both are very close, I have no issues ..

Leo Laohoo Mon, 12/30/2013 - 16:35
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

You mean I should sync AD and all my cisco devices with global NTP server?

Yes and no.  If you know your network well, doing this is a pain in the proverbial backside because you have to open firewall rules to everyone going out to the global NTP server.


The smart thing to do is what George has described.  You select a few (between two to four) to go out to the internet to synchronize.  Normally I would nominate our core routers do this.  Next, all our distribution switches and core switches synchronize to our core routers.  All our servers, PCs, printers, WLC, switches  sychronize to our distro switches. 

Actions

This Discussion

Related Content