topic Re: FMC as NTP server possible? in Network Security

FMC as NTP server possible?

J_Vansen_S — Fri, 21 Feb 2020 16:59:42 GMT

hi all,

Id like to know if the FMC can act as an NTP server for my internal servers/devices? Of so, how exaclty?

Or it can only serve as a NTP server for FTD only? Appreciate any advise

Re: FMC as NTP server possible?

Marvin Rhoads — Mon, 01 Apr 2019 05:04:15 GMT

While you can enable the service on an FMC, it is not recommended. Cisco specifically tells you not to do it on a virtual FMC.

Why would you even want to use it thus?

Re: FMC as NTP server possible?

johnlloyd_13 — Mon, 01 Apr 2019 07:52:29 GMT

hi marvin,

i don't think FMC can be used as NTP server.

i don't see any options under system > time and in time synchronization.

Re: FMC as NTP server possible?

Marvin Rhoads — Mon, 01 Apr 2019 13:04:03 GMT

@johnlloyd_13 You may be right.

Even though it is listening on udp/123 and reports itself as Stratum 12, it doesn't appear to serve when I set it as the ntp server on a switch.

root@fmc:~# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 LOCAL(1)        .SFCL.          12 l  11d   64    0    0.000    0.000   0.000
+y.ns.gin.ntt.ne 249.224.99.213   2 u  217 1024  367   28.320    6.027   3.611
+t2.time.tw1.yah 119.160.254.155  2 u  463 1024  375   83.210   -0.255   2.962
*send.mx.cdnetwo 216.239.35.12    2 u  320 1024  377  101.347    4.235   3.551
-ntp1.jst.mfeed. 133.243.236.17   2 u   28 1024  367  108.968   -4.719   3.647
root@fmc:~# netstat -a | grep ntp
udp        0      0 fmc.ccielab.mrneten:ntp *:*                                 
udp        0      0 localhost:ntp           *:*                                 
udp        0      0 localhost6:ntp          *:*                                 
root@fmc:~#

ccielab-3560cx#sh ntp assoc  

  address         ref clock       st   when   poll reach  delay  offset   disp
 ~172.31.1.10     .INIT.          16      -    512     0  0.000   0.000 15937.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
ccielab-3560cx#

Re: FMC as NTP server possible?

gsi-infra — Thu, 13 Mar 2025 01:28:04 GMT

can virtual FMC serve as NTP server for FTD ? is it Cisco recommended FMC as NTP server for FTD ? any issues if set other NTP server for FTD ?

Re: FMC as NTP server possible?

Leo Laohoo — Thu, 13 Mar 2025 02:35:37 GMT

Get a Raspberry Pi and build it as a Stratum 1 NTP server for the entire network.