topic Re: ISE Integration with AD in Network Access Control

ISE Integration with AD

alhoula — Wed, 22 Jan 2020 12:14:04 GMT

Hi, please any assistant to push ISE to use the configured NTP server instead of the local one?

Re: ISE Integration with AD

andrewswanson — Wed, 22 Jan 2020 12:24:57 GMT

See the link below to troubleshoot ISE and ntp sync issues.

hth

Andy

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119371-technote-ise-00.html

Re: ISE Integration with AD

Arne Bier — Thu, 23 Jan 2020 21:15:32 GMT

Hi @alhoula

There is no command or toggle switch to flip the ISE node to the desired ntp server - it's all automatic. The best thing you can do is to ensure that there is not too much time difference between the ISE's internal clock and the ntp server's clock. If the delta is too large then the convergence will take a long time (or not at all). At least that has been my experience of ntp over the years.

Re: ISE Integration with AD

Colby LeMaire — Thu, 23 Jan 2020 22:03:43 GMT

@Arne Bieris correct. The configured time on the ISE server is too far off of the NTP server's time so it will take a long time to sync or not at all. If you look at the "offset" column, that is the number of milliseconds off the NTP is from the local time on the machine. So your ISE time is more than 718 seconds (almost 12 minutes) ahead of the NTP server. Change the time on the ISE server to match closer and then it will sync and use the NTP server.

Re: ISE Integration with AD

alhoula — Sun, 26 Jan 2020 11:32:05 GMT

thank you @Arne Bier @Colby LeMaire for your support, I changed the time by " clock set" command.