Ethernet Switches & Routers

Reply
New Contributor
Posts: 3
Registered: ‎11-17-2016

Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

[ Edited ]

Im having a difficult time connecting to my NTP server to my FCX-48GS POE 48 running the operating system FCXS08030b.bin. I have the following connections on my Cisco switches with the correct Md5 key and IPs. The configuration I have on the Cisco switches is as follows:

 

Cisco 2960 NTP config

ntp authentication-key 1 md5 (hash) 7

ntp authenticate

ntp trusted-key 1

ntp server (IP)

ntp server (IP) prefer

 

the config i have so far on the FCX is as follows :

 

ntp

 authenticate

 authentication-key key-id 1 md5 2 (hash)

 server (IP)

 server (IP)

 

---------------------------

the result i get back is as follows: 

 

sh ntp associations detail

(IP) configured server, reject,  stratum 16

 ref ID INIT, time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 our mode client, peer mode server, our poll intvl 4, peer poll intvl 6,

 root delay 0 msec, root disp 0, root dist 16.10950025

 delay 0 msec, offset 0 msec, dispersion 16000,

 precision 2**-16, version 4

 org time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 rcv time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 xmt time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 filter delay       0.000     0.000     0.000     0.000     0.000     0.000     0.000     0.000

 filter offset      0.000     0.000     0.000     0.000     0.000     0.000     0.000     0.000

 filter disp    16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000

 filter epoch           0         0         0         0         0         0         0         0

 

(IP) configured server, reject,  stratum 16

 ref ID INIT, time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 our mode client, peer mode server, our poll intvl 4, peer poll intvl 6,

 root delay 0 msec, root disp 0, root dist 16.01635025

 delay 0 msec, offset 0 msec, dispersion 16000,

 precision 2**-16, version 4

 org time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 rcv time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 xmt time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)

 filter delay       0.000     0.000     0.000     0.000     0.000     0.000     0.000     0.000

 filter offset      0.000     0.000     0.000     0.000     0.000     0.000     0.000     0.000

 filter disp    16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000

 filter epoch           0         0         0         0         0         0         0         0

 

sh ntp status

 Clock is unsynchronized, no reference clock

 NTP server mode is enabled, NTP client mode is enabled

 NTP master mode is disabled, NTP master stratum is 8

 NTP is not in panic mode

 

sh ntp associations

   address         ref clock      st  when  poll reach  delay   offset  disp

 ~(IP)      INIT            16     -    64     0   0.00    0.000 16000.

 ~(IP)      INIT            16     -    64     0   0.00    0.000 16000.

* synced, # selected, + candidate, - outlayer, x falseticker, ~ configured

 

--------------------

The results I get back from the Cisco switch is as follows. 

 

sh ntp associations detail

(IP) configured, authenticated, insane, invalid, unsynced, stratum 16

ref ID .STEP., time 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)

our mode client, peer mode unspec, our poll intvl 1024, peer poll intvl 1024

root delay 0.00 msec, root disp 0.00, reach 0, sync dist 15953.90

delay 0.00 msec, offset 0.0000 msec, dispersion 15937.50

precision 2**17, version 4

org time 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)

rec time 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)

xmt time DBD3D125.D7F4D917 (05:59:01.843 UTC Mon Nov 14 2016)

filtdelay =     0.00    0.00    0.00    0.00    0.00    0.00    0.00    0.00

filtoffset =    0.00    0.00    0.00    0.00    0.00    0.00    0.00    0.00

filterror =  16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0

minpoll = 6, maxpoll = 10

 

(IP) configured, authenticated, our_master, sane, valid, stratum 1

ref ID .CDMA., time DBD3D475.EE965197 (06:13:09.931 UTC Mon Nov 14 2016)

our mode client, peer mode server, our poll intvl 512, peer poll intvl 512

root delay 0.00 msec, root disp 0.32, reach 377, sync dist 16.22

delay 2.37 msec, offset -0.8306 msec, dispersion 12.27

precision 2**16, version 4

org time DBD3D47A.DA0EDE67 (06:13:14.851 UTC Mon Nov 14 2016)

rec time DBD3D47A.DA94AE04 (06:13:14.853 UTC Mon Nov 14 2016)

xmt time DBD3D47A.D9D2B380 (06:13:14.850 UTC Mon Nov 14 2016)

filtdelay =     2.37    2.42    2.37    2.36    2.37    2.41    2.46    4.16

filtoffset =   -0.85   -0.83   -0.83   -0.83   -0.88   -0.81   -0.75    0.12

filterror =     0.02    7.73   15.44   23.10   30.81   38.51   46.22   53.90

minpoll = 6, maxpoll = 10

 

#sh ntp stat

Clock is synchronized, stratum 2, reference is (IP)

nominal freq is 119.2092 Hz, actual freq is 119.2076 Hz, precision is 2**17

reference time is DBD3D076.D7491FCE (05:56:06.840 UTC Mon Nov 14 2016)

clock offset is -0.8306 msec, root delay is 2.37 msec

root dispersion is 26.48 msec, peer dispersion is 12.27 msec

loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000013690 s/s

system poll interval is 512, last update was 1182 sec ago.

sh ntp ass

 

  address         ref clock       st   when   poll reach  delay  offset   disp

 ~(IP)      .STEP.          16      -   1024     0  0.000   0.000 15937.

*~(IP)      .CDMA.           1     77    512   377  2.379  -0.851 11.300

 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

 

Any help I can get on this issue would be greatly appriciated. 

Brocade Moderator
Posts: 188
Registered: ‎06-30-2010

Re: Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

Hi,

 

I note from your output that the Stratum of the NTP source in stratum 16, which would signify that this host in synchronised

 

See 5.1.4.1. What is the stratum? in the following link http://www.ntp.org/ntpfaq/NTP-s-algo.htm

 

I believe that this is the reason that the FCX is rejecting the NTP source is due to it being stratum 16

 

If you look at the output from the Cisco this is also not happy with the configured NTP source (IP) configured, authenticated, insane, invalid, unsynced, stratum 16

 

I would suggest that you try a different NTP source for time synchronisation

 

Hope this helps

 

Regards

Mick


If my response has solved your query please click the "Accept as Solution" button.

Any and all information provided by me is not reviewed, approved or endorsed by Brocade and is provided solely as a convenience for Brocade customers.

All systems and all networks are different and unique. If you have a service affecting network problem, please open a TAC service request for service through Brocade, or through your OEM equipment provider.
New Contributor
Posts: 3
Registered: ‎11-17-2016

Re: Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

Thank you for the quick feedback !

 

We are running 2 Tempus LX CDMA Network Time Servers. I believe the Cisco switch is connecting to the prefered time server which is the second one which is coming up as:

 

(IP) configured, authenticated, our_master, sane, valid, stratum 1

 

I dont think changing out the time servers would help me based off of the Cisco output unless it is incompatible with brocade for some reason.

I just have a feeling I am putting something in wrong, Im hoping to find a fix.

Brocade Moderator
Posts: 188
Registered: ‎06-30-2010

Re: Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

Hi,

 

The only issue that is apparent from your output is that the NTP server being used is Stratum 16

 

I would remove whichever the server that is creating this error from the configuration completely and test/verify again, I would just leave the one server.

 

If possible I would start with a simple configuration with one server and no authentication particularly if you have control of the NTP servers, there really is not much to it, as far as I can tell you are doing nothing wrong.  Its just as far as the Brocade is concerned the NTP server is untrusted (due to being stratum 16)

 

You could also try making the Cisco NTP server for the BRocade and see what effect that has

 

Hope this helps

 

Regards

Mick


If my response has solved your query please click the "Accept as Solution" button.

Any and all information provided by me is not reviewed, approved or endorsed by Brocade and is provided solely as a convenience for Brocade customers.

All systems and all networks are different and unique. If you have a service affecting network problem, please open a TAC service request for service through Brocade, or through your OEM equipment provider.
New Contributor
Posts: 3
Registered: ‎11-17-2016

Re: Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

Hello, 

 

Our Tempus LX CDMA Network Time Servers are both Stratum 1 devices. On the Cisco output it shows them as a Stratum 1 but i think it isnt showing on the Brocade because it hasnt connected yet. I'm wondering if one of the devices is rejecting the other because of this line :  "configured server, reject,  stratum 16" 

 

I would use the Cisco device as the server but  I am limited because of Govt. STIG requirements. I am presently sampling  the Brocade switch so that I can purchase 10 switches for deployement on our network but this is a requirement I need to satisfy. 

 

It would make sense that it would be being rejected because of a difference in passwords but I am copy/pasting it straight from our master list. 

 

I am wondering what exactly the reject means in the  "configured server, reject,  stratum 16" 

 

I really do appriciate the help I have recieved so far. 

Brocade Moderator
Posts: 188
Registered: ‎06-30-2010

Re: Connecting to NTP server to FCX-48GS POE 48 (FCXS08030b) with Cisco config

Hi,

 

Having looked a bit deeper at this, I agree this may be due to not having connected yet

 

The output (IP) configured server, reject,  stratum 16 is misleading and simply means in this context of show ntp associations detail that no synchronisation has happened.

 

I tried this on another switch by simply configuring an NTP server which did not exist and this is the output I saw which is just the same

 

ICX6430-1(config-ntp)#sho ntp associations detail
1.1.1.1 configured server, reject, stratum 16
ref ID INIT, time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)
our mode client, peer mode server, our poll intvl 4, peer poll intvl 6,
root delay 0 msec, root disp 0, root dist 16.00024025
delay 0 msec, offset 0 msec, dispersion 16000,
precision 2**-16, version 4
org time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)
rcv time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)
xmt time 0.0 (00:00:00.0 GMT+00 Mon Jan 01 0)
filter delay 0.000 0.000 0.000 0.000 0.000 0.000 0.000 0.000
filter offset 0.000 0.000 0.000 0.000 0.000 0.000 0.000 0.000
filter disp 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000 16000.000
filter epoch 0 0 0 0 0 0 0 0

 

I then tried to configure NTP authentication one switch using another switch for time source

 

I configured the NTP on the client as follows:

 

ntp
 authentication-key key-id 1 md5 (hash)
 server 10.26.5.51 key 1

 

As far as I can tell when you configure an NTP server you need to associate it with a key that has already been defined, if you do not it will without authentication

 

I think the servers that you defined were not associated with key

 

Regards

Mick

 

 


If my response has solved your query please click the "Accept as Solution" button.

Any and all information provided by me is not reviewed, approved or endorsed by Brocade and is provided solely as a convenience for Brocade customers.

All systems and all networks are different and unique. If you have a service affecting network problem, please open a TAC service request for service through Brocade, or through your OEM equipment provider.

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.