cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
14542
Views
1
Helpful
5
Replies

ntp on ise

Kashish_Patel
Level 2
Level 2

I have configured new NTP servers on our primary ISE node (admin and monitor persona). I have saved the config. Ideally the primary admin/monitor node should now sync new ntp servers to secondary admin/monitor persona node as well as to other PSNs. But that is not happening. I also tried to manually sync NTP servers to secondary admin/monitor node but that shows old NTP IPs only. Primary node shows that config of secondary node is in sync. What is the problem?

5 Replies 5

stojanr
Level 1
Level 1

The CLI configuration, including the NTP servers, is not being synchronized between the appliances in your ISE deployment. You have to manually set the appropriate NTP servers for each appliance at setup time or by connecting to the CLI later.

Sent from Cisco Technical Support iPad App

mojuneja
Level 1
Level 1

In order to sync all nodes with NTP server, you have to configure NTP settings manually on all nodes using CLI.

Thanks Mohit and stojanr. Could you please point me to a Cisco doc stating the same?

Thanks,

Kashish

Could you please point me to a Cisco doc stating the same?

Note You must configure the system time and NTP server settings on each ISE node in your deployment individually.

Here is the document that states this:

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_admin.html#wp1087241

If this help, please rate the answer and mark the question as Answered.

Thank you,

Charles Moerton

Venkatesh Attuluri
Cisco Employee
Cisco Employee

You must configure the system time and NTP server settings on each ISE node in your deployment individually.

Step 1 From your primary ISE node, choose Administration > System > Settings.

Step 2 From the Settings navigation pane on the left, click System Time.

The timezone that you have configured appears in the Time Zone field. You cannot edit this value from the ISE user interface. To configure the time zone, you must enter the following command from the ISE CLI:

clock timezone timezone

For more information on the clock timezone command, see the Cisco Identity Services Engine CLI Reference Guide, Release 1.0.4.

Step 3 In the NTP Server Configuration area, enter the IP address of your primary, secondary, and tertiary NTP servers.

If you have only one NTP server in your network, enter the IP address in the Primary Server text box. If you have two NTP servers, enter the IP address in the Primary Server and Secondary Server text boxes.

Step 4 Click Save to save the NTP server settings.