topic Re: Cisco ISE - Clock Falling Behind in Network Access Control

Cisco ISE - Clock Falling Behind

Ryeloc — Fri, 09 Apr 2021 14:40:21 GMT

I am having an issue with Cisco ISE 2.7 Patch 3, one of my redundant nodes is slowing losing its time. After about 2-3 hours it will be about 30 - 60 seconds behind, then 6-10 hours later, its minutes behind and its AD connection stops working. I have to reboot the node to resolve the issue. I've tried using different NTP servers, and the same results keep happening. It's using the same NTP server as another ISE node and that other node is working fine without any issues.

Re: Cisco ISE - Clock Falling Behind

Mark Elsen — Fri, 09 Apr 2021 17:19:19 GMT

- FYI : https://community.cisco.com/t5/network-access-control/synchronizing-cisco-ise-and-ntp-server/td-p/2051993

Re: Cisco ISE - Clock Falling Behind

Ryeloc — Fri, 09 Apr 2021 17:25:12 GMT

I am not syncing to an AD server. I am syncing to a Cisco router. One of the ISE servers is working fine syncing to the same router, the other is syncing but falling behind in time.

Re: Cisco ISE - Clock Falling Behind

Marcelo Morais — Fri, 09 Apr 2021 20:27:03 GMT

Hi @Ryeloc

please try to disable and reenable NTP:

no ntp server
ntp server <NTP Server>

after that

show ntp

what is the result?

Note: are you using a KEY on the NTP configuration?

Hope this helps !!!