ISE Integration with AD

[alhoula]

Hi, please any assistant to push ISE to use the configured NTP server instead of the local one? 

[andrewswanson]

Hi

See the link below to troubleshoot ISE and ntp sync issues.

hth

Andy

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119371-technote-ise-00.html

[Arne Bier · Accepted solution]

Hi @alhoula 

There is no command or toggle switch to flip the ISE node to the desired ntp server - it's all automatic. The best thing you can do is to ensure that there is not too much time difference between the ISE's internal clock and the ntp server's clock. If the delta is too large then the convergence will take a long time (or not at all). At least that has been my experience of ntp over the years.

[Colby LeMaire · Accepted solution]

@Arne Bieris correct.  The configured time on the ISE server is too far off of the NTP server's time so it will take a long time to sync or not at all.  If you look at the "offset" column, that is the number of milliseconds off the NTP is from the local time on the machine.  So your ISE time is more than 718 seconds (almost 12 minutes) ahead of the NTP server.  Change the time on the ISE server to match closer and then it will sync and use the NTP server.

[alhoula]

thank you @Arne Bier  @Colby LeMaire  for your support,  I changed the time by " clock set"  command.