Cisco ISE - Clock Falling Behind

[Ryeloc]

I am having an issue with Cisco ISE 2.7 Patch 3, one of my redundant nodes is slowing losing its time. After about 2-3 hours it will be about 30 - 60 seconds behind, then 6-10 hours later, its minutes behind and its AD connection stops working. I have to reboot the node to resolve the issue. I've tried using different NTP servers, and the same results keep happening. It's using the same NTP server as another ISE node and that other node is working fine without any issues.

[marce1000]

 - FYI : https://community.cisco.com/t5/network-access-control/synchronizing-cisco-ise-and-ntp-server/td-p/2051993

  M.

[Ryeloc]

I am not syncing to an AD server. I am syncing to a Cisco router. One of the ISE servers is working fine syncing to the same router, the other is syncing but falling behind in time. 

[Marcelo Morais]

Hi @Ryeloc 

 please try to disable and reenable NTP:

no ntp server
ntp server <NTP Server>

after that

show ntp

what is the result?

Note: are you using a KEY on the NTP configuration?

Hope this helps !!!