I've had routers that didn't change to reflect the data they receive trom an NTP source, and the problem was traced to the fact that the routers' configurations had the command "ntp master". See if your config has this command, and if so get rid of it.
I just noticed the bit about the address of your firewall in the NTP RCV packets in your debug trace. Your router is expecting to receive NTP packets from 184.108.40.206. Is your firewall is translating this address to its own IP address on VLAN 10?
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...