CUCM 7.1.5 - Syslog error with NTP

[paulo.rio]

Hello,

I have upgraded CUCM Cluster from version 7.1.(2) to 7.1(5). The Cluster is made of 1 Pub, 8 Subs and 2 TFTP's.

The CallManagers are located behind a FW and are synchronizing NTP with two Cisco Routers. I have External Syslog configured for all CUCM

When I use the command in CLI "utils ntp status", result is

ntpd (pid 10587) is running...

....

synchronised to NTP server (XX.XX.XX.XX) at stratum 5

   time correct to within 78 ms

   polling server every 1024 s

In GUI the result for both NTP Server is is "The NTP service is accessible.".

But Syslog is sending a trap every 30 minutes with the message "...NTP is not synchronizing with any of the external NTP Servers...."

In the FW logs I can see the a connection is functioning

CUCM    Port 123   -->  NTP server 123  - Ok,

but then I see a connection from CUCM high ports (50000 and higher)   -->NTP server 123  - NOk.

Is this normal?

Paulo Del Rio

[Joseph Martini]

I see the same thing with my call manager publisher looks like it's because the publisher is both a client and a server:

http://docstore.mik.ua/orelly/networking_2ndEd/fire/ch22_05.htm.  Does the error go away from your syslog if you open the higher UDP ports for your publisher?

[paulo.rio]

Hi,

After openning the port in the FW, Syslog messages have disappear.

I don't know what service needed to use NTP high port.

Paulo Rio