cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

168
Views
20
Helpful
4
Replies
Beginner

ISE Integration with AD

Hi, please any assistant to push ISE to use the configured NTP server instead of the local one? 

iseNTP.png

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
VIP Advocate

Re: ISE Integration with AD

Hi @alhoula 

 

There is no command or toggle switch to flip the ISE node to the desired ntp server - it's all automatic. The best thing you can do is to ensure that there is not too much time difference between the ISE's internal clock and the ntp server's clock. If the delta is too large then the convergence will take a long time (or not at all). At least that has been my experience of ntp over the years.

View solution in original post

Highlighted
Rising star

Re: ISE Integration with AD

@Arne Bieris correct.  The configured time on the ISE server is too far off of the NTP server's time so it will take a long time to sync or not at all.  If you look at the "offset" column, that is the number of milliseconds off the NTP is from the local time on the machine.  So your ISE time is more than 718 seconds (almost 12 minutes) ahead of the NTP server.  Change the time on the ISE server to match closer and then it will sync and use the NTP server.

View solution in original post

4 REPLIES 4
Highlighted
Contributor

Re: ISE Integration with AD

Hi

See the link below to troubleshoot ISE and ntp sync issues.

hth

Andy

 

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119371-technote-ise-00.html

Highlighted
VIP Advocate

Re: ISE Integration with AD

Hi @alhoula 

 

There is no command or toggle switch to flip the ISE node to the desired ntp server - it's all automatic. The best thing you can do is to ensure that there is not too much time difference between the ISE's internal clock and the ntp server's clock. If the delta is too large then the convergence will take a long time (or not at all). At least that has been my experience of ntp over the years.

View solution in original post

Highlighted
Rising star

Re: ISE Integration with AD

@Arne Bieris correct.  The configured time on the ISE server is too far off of the NTP server's time so it will take a long time to sync or not at all.  If you look at the "offset" column, that is the number of milliseconds off the NTP is from the local time on the machine.  So your ISE time is more than 718 seconds (almost 12 minutes) ahead of the NTP server.  Change the time on the ISE server to match closer and then it will sync and use the NTP server.

View solution in original post

Highlighted
Beginner

Re: ISE Integration with AD

thank you @Arne Bier  @Colby.LeMaire  for your support,  I changed the time by " clock set"  command.