FMC as NTP server possible?

[J_Vansen_S]

hi all, 

Id like to know if the FMC can act as an NTP server for my  internal servers/devices? Of so, how exaclty?

Or it can only serve as a NTP server for FTD only? Appreciate any advise

[Marvin Rhoads]

While you can enable the service on an FMC, it is not recommended. Cisco specifically tells you not to do it on a virtual FMC. 

Why would you even want to use it thus?

[johnlloyd_13]

hi marvin,

i don't think FMC can be used as NTP server.

i don't see any options under system > time and in time synchronization.

[Marvin Rhoads]

@johnlloyd_13 You may be right.

Even though it is listening on udp/123 and reports itself as Stratum 12, it doesn't appear to serve when I set it as the ntp server on a switch.

root@fmc:~# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 LOCAL(1)        .SFCL.          12 l  11d   64    0    0.000    0.000   0.000
+y.ns.gin.ntt.ne 249.224.99.213   2 u  217 1024  367   28.320    6.027   3.611
+t2.time.tw1.yah 119.160.254.155  2 u  463 1024  375   83.210   -0.255   2.962
*send.mx.cdnetwo 216.239.35.12    2 u  320 1024  377  101.347    4.235   3.551
-ntp1.jst.mfeed. 133.243.236.17   2 u   28 1024  367  108.968   -4.719   3.647
root@fmc:~# netstat -a | grep ntp
udp        0      0 fmc.ccielab.mrneten:ntp *:*                                 
udp        0      0 localhost:ntp           *:*                                 
udp        0      0 localhost6:ntp          *:*                                 
root@fmc:~#

ccielab-3560cx#sh ntp assoc  

  address         ref clock       st   when   poll reach  delay  offset   disp
 ~172.31.1.10     .INIT.          16      -    512     0  0.000   0.000 15937.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
ccielab-3560cx#