topic Re: ISE clock question in Network Access Control

ISE clock question

ashaw216 — Mon, 11 Mar 2019 04:01:05 GMT

I'm in the midst of setting up an ISE server but I noticed something. The clock is syncing with our NTP server, but it apparently has no setting for Daylight Savings Time, so it is currently 1 hour behind the rest of our systems. Is this going to cause an issue and if so, how is it fixed? Thanks!

ISE clock question

Jatin Katyal — Tue, 22 Oct 2013 14:17:04 GMT

Can you please send me the following outputs from ISE command line interface :

1. Show version

2. Show running-config

3. Show timezone

~BR
Jatin Katyal

**Do rate helpful posts**

Re: ISE clock question

Mikael Gustafsson — Tue, 22 Oct 2013 14:42:13 GMT

How did you configure time zone?
I use 'Stockholm/Sweden' (or reverse) and get CEST/CET with that.

Cheers

Sent from Cisco Technical Support iPhone App

Re: ISE clock question

ashaw216 — Tue, 22 Oct 2013 14:43:25 GMT

I changed the timezone to America/New York and it looks to be working. Thanks!

Re: ISE clock question

aqjaved — Wed, 23 Oct 2013 13:18:12 GMT

To set the system clock, use the

clock

command in the EXEC mode. To remove this function, use the

form of this command.

clock set [month day hh:min:ss yyyy]

Syntax Description

clock set	The command that sets the system clock.
month	Current month of the year by name. Supports up to three alphabetic characters. For example, Jan for January.
day	Current day (by date) of the month. Value = 0 to 31. Supports up to two numbers.
hh:mm:ss	Current time in hours (24-hour format), minutes, and seconds.
yyyy	Current year (no abbreviation).

Please Check the below guide which will be help for you:

http://www.cisco.com/en/US/docs/security/ise/1.0/cli_ref_guide/ise10_cli_app_a.html#wp1036987

Re: ISE clock question

Venkatesh Attuluri — Tue, 29 Oct 2013 15:36:39 GMT

FYI

Changing the time zone on a Cisco ISE appliance after installation causes the Cisco ISE application on that node to be unusable. However, the preferred time zone (default UTC) can be configured during the installation when the initial setup wizard prompts you for the time zone.

Re: ISE clock question

ashaw216 — Thu, 31 Oct 2013 14:29:11 GMT

Wow, seriously? Changing the timezone renders the appliance unusable? That seems like a little it of a bug-like feature doesn't it?

How is one to change the timezone then? Perform a complete reinstall of the appliance?? What if it's a Standalone?

Re: ISE clock question

embowers1 — Thu, 31 Oct 2013 14:43:14 GMT

For the install we just did we configured it for EST time as per the requirement, now the clock is off by and hour. This must be a feature?

Re: ISE clock question

Abha Jha — Thu, 31 Oct 2013 21:42:53 GMT

Cisco ISE currently automatically changes time for daylight savings time depending on how the timezone was configured via the CLI. Please see the following link for sample time zones:

http://www.cisco.com/en/US/docs/security/ise/1.1/cli_ref_guide/ise_cli_app_a.html#wp1013028

Re: ISE clock question

ashaw216 — Fri, 01 Nov 2013 11:12:23 GMT

Actually, selecting simple EST does not adjust automatically for Daylight Savings Time (DST) and this is why I had to change the timezone to specify a city (even though to my knowledge, there is no state in the EST timezone which does not also participate in DST).

Now someone mentions that changing the timezone breaks the appliance. If this is true, it's possibly the least robust solution I've seen from Cisco in years.

Re: ISE clock question

embowers1 — Fri, 01 Nov 2013 12:58:24 GMT

This is straight from TAC on what we need to do to correct the problem. I doubt we will push this remediation forward after this.

So the timezone itself is probably actually in EST (Eastern Standard Time), but this does not shift for daylight savings.

You will want yours to actually be EST5EDT to execute daylight savings (EDT).

I can provide you the process in which to change the timezone, but we do not recommend changing the timezone. Changing it may cause database errors. I have seen many systems work perfectly fine, but a couple that have corrupt due to the change. This is simply a warning.

Attached is the procedure.

Step 3 is actually where the change in the config happens.

In step 4, you will see the application reset-config ise. This will wipe your box to factory defaults.

A few customer were able to simply 'reload' (reboot) the box and the change took place with no ill side affects and no need to restore backups.

Again, we do not recommend changing the timezone, but the choice is yours.

Re: ISE clock question

bharvish — Wed, 19 Jun 2019 00:43:42 GMT