Cisco ISE - Clock Falling Behind

Ryeloc · ‎04-09-2021

I am having an issue with Cisco ISE 2.7 Patch 3, one of my redundant nodes is slowing losing its time. After about 2-3 hours it will be about 30 - 60 seconds behind, then 6-10 hours later, its minutes behind and its AD connection stops working. I have to reboot the node to resolve the issue. I've tried using different NTP servers, and the same results keep happening. It's using the same NTP server as another ISE node and that other node is working fine without any issues.

marce1000 · ‎04-09-2021

- FYI : https://community.cisco.com/t5/network-access-control/synchronizing-cisco-ise-and-ntp-server/td-p/2051993

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Ryeloc · ‎04-09-2021

I am not syncing to an AD server. I am syncing to a Cisco router. One of the ISE servers is working fine syncing to the same router, the other is syncing but falling behind in time.

Marcelo Morais · ‎04-09-2021

Hi @Ryeloc

please try to disable and reenable NTP:

no ntp server
ntp server <NTP Server>

after that

show ntp

what is the result?

Note: are you using a KEY on the NTP configuration?

Hope this helps !!!