Hi,
I want the PIX to synchronize with two Windows 2000 domain controllers.
The synchronization works but the PIX does not synch its own clock with the time it gets from the server.
See output from the "show ntp association detail":
x.x.x.x configured, insane, invalid, stratum 2
ref ID x.x.x.x, time c35a06fd.b33c6d6e (13:45:49.700 GMT+1 Mon Nov 10 2003
)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.00 msec, root disp 1000.02, reach 377, sync dist 1743.927
delay 0.29 msec, offset -158703.8455 msec, dispersion 736.54
precision 2**7, version 3
org time c35a1c4c.34fdf3b6 (15:16:44.206 GMT+1 Mon Nov 10 2003)
rcv time c35a1cea.e936e465 (15:19:22.910 GMT+1 Mon Nov 10 2003)
xmt time c35a1cea.e92372da (15:19:22.910 GMT+1 Mon Nov 10 2003)
filtdelay = 0.29 0.27 0.26 0.24 0.26 0.29 0.24 0.24
filtoffset = -158703 -158326 -157934 -157556 -157179 -156785 -156408 -156031
filterror = 0.02 15.64 31.27 46.89 62.52 78.14 93.77 109.39
x.x.x.x configured, insane, invalid, stratum 2
ref ID x.x.x.x, time c35a0f1f.78b790fb (14:20:31.471 GMT+1 Mon Nov 10 2003)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 0.00 msec, root disp 1000.02, reach 377, sync dist 1743.835
delay 0.37 msec, offset -158889.2093 msec, dispersion 743.64
precision 2**7, version 3
org time c35a1e26.076c8b44 (15:24:38.028 GMT+1 Mon Nov 10 2003)
rcv time c35a1ec4.eb1c2d10 (15:27:16.918 GMT+1 Mon Nov 10 2003)
xmt time c35a1ec4.eb03598f (15:27:16.918 GMT+1 Mon Nov 10 2003)
filtdelay = 0.37 0.44 0.41 0.43 0.41 0.43 0.40 0.38
filtoffset = -158889 -158502 -158131 -157744 -157312 -156925 -156539 -156168
filterror = 0.02 15.64 31.27 46.89 62.52 78.14 93.77 109.39
and from
"show ntp status":
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 99.9984 Hz, actual freq is 99.9984 Hz, precision is 2**6
reference time is 00000000.00000000 (07:28:16.000 GMT+1 Thu Feb 7 2036)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
Any ideas?
Thanks,
Emanuel