10-12-2023 07:43 AM - edited 10-12-2023 03:43 PM
Good morning,
I have tried to update my ASAv firewall to the correct time but unfortunately no success. The firewall can communicate with the NTP server. I also reloaded it with no success. Here is the configuration:
RED-IEC-1# sh run | i clock
clock timezone EDT-5 0
clock summer-time EST-5 recurring 5
RED-IEC-1# sh clo
RED-IEC-1# sh clock
14:31:16.051 EST-5 Thu Oct 12 2023
RED-IEC-1# sh nt
RED-IEC-1# sh ntp st
RED-IEC-1# sh ntp status
Clock is synchronized, stratum 3, reference is 51.81.226.229
nominal freq is 99.9984 Hz, actual freq is 99.9984 Hz, precision is 2**6
reference time is e8d27f23.7647ce8c (14:25:19.462 EST-5 Thu Oct 12 2023)
clock offset is -5.6503 msec, root delay is 154.72 msec
root dispersion is 51.33 msec, peer dispersion is 19.62 msec
: Saved
RED-IEC-1# traceroute 51.81.226.229
1 172.16.2.X 10 msec 3 msec 4 msec
2 172.16.2.X 9 msec 20 msec 6 msec
3 172.16.1.X 18 msec 8 msec 8 msec
4 172.16.1.X 26 msec 9 msec 9 msec
5 192.168.1.X 19 msec 23 msec 16 msec
6 99.58.100.1 17 msec 19 msec 19 msec
7 99.167.37.216 23 msec 20 msec 19 msec
8 12.242.116.11 22 msec 31 msec 22 msec
9 *
62.115.11.1 29 msec *
10 62.115.119.230 55 msec
62.115.120.176 57 msec
62.115.119.230 217 msec
11 *
62.115.140.209 78 msec *
12 192.99.146.64 70 msec 56 msec 65 msec
12 * *
198.27.73.88 81 msec
13 *
142.44.208.161 119 msec 112 msec
142.44.208.229 113 msec 122 msec 120 msec
14 51.81.226.229 112 msec 90 msec
TIA
Solved! Go to Solution.
10-13-2023 11:33 AM
I found the step to follow in this document: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113620-acs-ntp-context-00.pdf
10-12-2023 07:47 AM
Wait half hours and check again.
10-12-2023 09:08 AM
Still not working after 30 minutes.
10-12-2023 08:10 AM
Make sure your hypervisor has the correct clock time.
10-12-2023 09:07 AM
I am using EVE-NG, don't see how to change the time on it.
10-12-2023 09:22 AM
EVE-NG has a screen to set its NTP server during setup.
https://www.eve-ng.net/index.php/documentation/installation/howto-configure-eve-during-first-boot/
If its running on a hypervisor itself, that hypervisor likewise will have a time setting. In a nested virtualization environment, the system time generally is synced from the parent hypervisor down through any nested hypervisors to the VMs (such as ASAv in your case).
If that still doesn't fix it, you might try the EVE-NG forums instead.
10-12-2023 12:25 PM
Thanks, Marvin for your reply! I followed this link mentioned above already but for some reason, I still don't have the correct time on my EVE itself and my ASAv. I installed EVE-NG on VMWare workstation 17 player which was installed on my desktop.
10-13-2023 11:33 AM
I found the step to follow in this document: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113620-acs-ntp-context-00.pdf
10-13-2023 07:57 PM
I send you private message
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide