Turn On NTP Distribute NXOS

[Shaqxify]

Hi Guys,

I had posted something yesterday on NTP not working. I just noticed that NTP distribution is disabled on the Nexus C3548P. How do I turn it on?

I have included outputs for the following:-

Sh feature

Sh ver

sh ntp status

-CSW-001# sh ntp stat
^
% Ambiguous command at '^' marker.
HQS-BF-CSW-001# sh ntp statu
Distribution : Disabled
Last operational state: No session
HQS-BF-CSW-001#
HQS-BF-CSW-001#
HQS-BF-CSW-001#
HQS-BF-CSW-001# sh fe?
feature Show feature status
feature-set Show feature set status

HQS-BF-CSW-001# sh fea
^
% Ambiguous command at '^' marker.
HQS-BF-CSW-001# sh fea
feature feature-set
HQS-BF-CSW-001# sh feature
Feature Name Instance State
-------------------- -------- --------
Flexlink 1 disabled
analytics 1 disabled
bash-shell 1 disabled
bfd 1 disabled
bgp 1 disabled
bulkstat 1 disabled
cable-management 1 disabled
catena 1 disabled
container-tracker 1 disabled
macsec 1 disabled
dhcp 1 disabled
dot1x 1 disabled
eigrp 1 disabled
eigrp 2 disabled
eigrp 3 disabled
eigrp 4 disabled
eigrp 5 disabled
eigrp 6 disabled
eigrp 7 disabled
eigrp 8 disabled
eigrp 9 disabled
eigrp 10 disabled
eigrp 11 disabled
eigrp 12 disabled
eigrp 13 disabled
eigrp 14 disabled
eigrp 15 disabled
eigrp 16 disabled
eth-port-sec 1 disabled
evb 1 disabled
evc 1 disabled
evmed 1 disabled
fabric-access 1 disabled
fabric_mcast 1 disabled
grpc 1 disabled
hardware-telemetry 1 disabled
hmm 1 disabled
hsrp_engine 1 disabled
icam 1 disabled
imp 1 disabled
interface-vlan 1 enabled
isis 1 disabled
isis 2 disabled
isis 3 disabled
isis 4 disabled
isis 5 disabled
isis 6 disabled
isis 7 disabled
isis 8 disabled
isis 9 disabled
isis 10 disabled
isis 11 disabled
isis 12 disabled
isis 13 disabled
isis 14 disabled
isis 15 disabled
isis 16 disabled
itd 1 disabled
l2vpn 1 disabled
l3vpn 1 disabled
lacp 1 disabled
ldap 1 disabled
ldp 1 disabled
license-smart 1 disabled
lldp 1 enabled
mpls-evpn 1 disabled
mpls_oam 1 disabled
mpls_static 1 disabled
msdp 1 disabled
mvrp 1 disabled
nat 1 disabled
nbm 1 disabled
netconf 1 disabled
ngmvpn 1 disabled
ngoam 1 disabled
npiv 1 disabled
nve 1 disabled
nxapi 1 disabled
nxsdk_app1 1 disabled
nxsdk_app10 1 disabled
nxsdk_app11 1 disabled
nxsdk_app12 1 disabled
nxsdk_app13 1 disabled
nxsdk_app14 1 disabled
nxsdk_app15 1 disabled
nxsdk_app16 1 disabled
nxsdk_app17 1 disabled
nxsdk_app18 1 disabled
nxsdk_app19 1 disabled
nxsdk_app2 1 disabled
nxsdk_app20 1 disabled
nxsdk_app21 1 disabled
nxsdk_app22 1 disabled
nxsdk_app23 1 disabled
nxsdk_app24 1 disabled
nxsdk_app25 1 disabled
nxsdk_app26 1 disabled
nxsdk_app27 1 disabled
nxsdk_app28 1 disabled
nxsdk_app29 1 disabled
nxsdk_app3 1 disabled
nxsdk_app30 1 disabled
nxsdk_app31 1 disabled
nxsdk_app32 1 disabled
nxsdk_app4 1 disabled
nxsdk_app5 1 disabled
nxsdk_app6 1 disabled
nxsdk_app7 1 disabled
nxsdk_app8 1 disabled
nxsdk_app9 1 disabled
nxsdk_mgr 1 disabled
onep 1 disabled
openflow 1 disabled
ospf 1 disabled
ospf 2 disabled
ospf 3 disabled
ospf 4 disabled
ospf 5 disabled
ospf 6 disabled
ospf 7 disabled
ospf 8 disabled
ospf 9 disabled
ospf 10 disabled
ospf 11 disabled
ospf 12 disabled
ospf 13 disabled
ospf 14 disabled
ospf 15 disabled
ospf 16 disabled
ospfv3 1 disabled
ospfv3 2 disabled
ospfv3 3 disabled
ospfv3 4 disabled
ospfv3 5 disabled
ospfv3 6 disabled
ospfv3 7 disabled
ospfv3 8 disabled
ospfv3 9 disabled
ospfv3 10 disabled
ospfv3 11 disabled
ospfv3 12 disabled
ospfv3 13 disabled
ospfv3 14 disabled
ospfv3 15 disabled
ospfv3 16 disabled
pbr 1 disabled
pim 1 disabled
pim6 1 disabled
plb 1 disabled
pnp 1 disabled
poe 1 disabled
private-vlan 1 disabled
privilege 1 disabled
ptp 1 disabled
restconf 1 disabled
rip 1 disabled
rip 2 disabled
rip 3 disabled
rip 4 disabled
rise 1 disabled
scheduler 1 disabled
scpServer 1 disabled
segment-routing 1 disabled
sflow 1 disabled
sftpServer 1 disabled
sla_responder 1 disabled
sla_sender 1 disabled
sla_twamp 1 disabled
smart-channel 1 disabled
srte 1 disabled
sshServer 1 enabled
tacacs 1 disabled
telemetry 1 disabled
telnetServer 1 enabled
tunnel 1 disabled
udld 1 disabled
vmtracker 1 disabled
vni 1 disabled
vnseg_vlan 1 disabled
vpc 1 disabled
vrrp 1 disabled
vrrpv3 1 disabled
vtp 1 enabled

-CSW-001# sh ver
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (C) 2002-2018, Cisco and/or its affiliates.
All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under their own
licenses, such as open source. This software is provided "as is," and unless
otherwise stated, there is no warranty, express or implied, including but not
limited to warranties of merchantability and fitness for a particular purpose.
Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or
GNU General Public License (GPL) version 3.0 or the GNU
Lesser General Public License (LGPL) Version 2.1 or
Lesser General Public License (LGPL) Version 2.0.
A copy of each such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://opensource.org/licenses/gpl-3.0.html and
http://www.opensource.org/licenses/lgpl-2.1.php and
http://www.gnu.org/licenses/old-licenses/library.txt.

Software
BIOS: version 5.0.0
NXOS: version 9.2(2)
BIOS compile time: 05/22/2018
NXOS image file is: bootflash:///nxos.9.2.2.bin
NXOS compile time: 11/4/2018 21:00:00 [11/05/2018 07:25:06]

Hardware
cisco Nexus3500 C3548P-10GX Chassis
Intel(R) Pentium(R) CPU @ 2.00GHz with 4030540 kB of memory.
Processor Board ID FOC24153UBQ

Device name: HQS-BF-CSW-001
bootflash: 3800064 kB
usb1: 0 kB (expansion flash)
usb2: 0 kB (expansion flash)

Kernel uptime is 2 day(s), 13 hour(s), 33 minute(s), 39 second(s)

Last reset
--More--

HQS-BF-CSW-001#

[marce1000]

 - Which command options are (still)  available when trying show ntp ? - Also check the below document for further configuration guidelines :

            https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3548/sw/system_mgmt/b_N3548_System_Management_Config_503_A1/b_N3548_System_Management_Config_503_A1_chapter_010100.html#d10242e388a1635

 M.

[Shaqxify]

Hi @marce1000 

Thanks please do see below

CSW-001# sh ntp ?
access-groups Display NTP access groups
authentication-keys Display authentication keys
authentication-status NTP Authentication Status
information Show ntp information
internal NTP internal info
logging-status Display NTP logging status
peer-status Show the status for all the server/peers
peers Show all the peers.
rts-update Show if the RTS update is enabled
session Show the session information
source Source IP address configured
source-interface Source interface configured
statistics Show the NTP statistics
status Show the NTP distribution status
trusted-keys Display trusted keys

CSW-001# sh ntp

Regards & Respect,

Shaqx

[marce1000]

 - I guess  , you should be ready to go and or the equivalent command you may need is probably show ntp information

 M.

[Shaqxify]

It is still disabled, Unfortunately.

CSW-001# sh ntp information
Ntp System Type : Cisco NXOS
Ntp Software Version : ntp-4.2.6p2

CSW-001#

Regards & Respect,

Shaqx

[marce1000]

                  - I can't see any reference to it being disabled.

 M.

[Shaqxify]

@marce1000 

I had shared in earlier output, you might have missed it.

CSW-001# sh ntp stat
^
% Ambiguous command at '^' marker.
HQS-BF-CSW-001# sh ntp statu
Distribution : Disabled
Last operational state: No session
HQS-BF-CSW-001#
HQS-BF-CSW-001#
HQS-BF-CSW-001#
HQS-BF-CSW-001# sh fe?

[marce1000 · Accepted solution]

 - Essentially you won't need to have ntp distribution enabled. It is only needed when the device needs to receive NTP configuration updates that are distributed through CFS. So you can leave that alone and carry-on.

 M.

[Shaqxify]

@marce1000So You Saying Am Good To Go? What Command Can I Use To Verify This On The Clients?

Regards & Respect,

Shaqx

[balaji.bandi]

show run | in ntp  - look what configured.

[Shaqxify]

Hi @balaji.bandi 

Please do see below, thanks once again for always being available to help.

CSW-001# show run | in ntp
class-map type control-plane match-any copp-ntp
match access-group name copp-system-acl-ntp
class copp-ntp
ntp source-interface Vlan102
ntp master 1
CSW-001# sh ntp in
information internal
CSW-001# sh ntp information
Ntp System Type : Cisco NXOS
Ntp Software Version : ntp-4.2.6p2

CSW-001#

Regards & Respect,

Shaqx

[balaji.bandi]

where is the source clock getting from outside stratum or switch clock ?

[Shaqxify]

@balaji.bandiSwitch Clock

Regards & Respect

Shaqx

[balaji.bandi]

I might have missed something here. if the Nexus act as NTP Server. you configuring other switches to source clock from nexus.

So you on client switch you configured Nexus switch as peer to get NTP source, so what is not working ?

[Shaqxify]

Hello @balaji.bandi ,

I am so sorry for the unclarity, please do allow me to take you through. I have set up the NXOS as the NTP server.

CSW-001# sh run | i ntp
class-map type control-plane match-any copp-ntp
match access-group name copp-system-acl-ntp
class copp-ntp
ntp source-interface Vlan102
ntp master 1

CSW-001# sh ntp status
Distribution : Disabled
Last operational state: No session
HQS-BF-CSW-001# sh ntp pee
peer-status peers

CSW-001# sh ntp peers
--------------------------------------------------
Peer IP Address Serv/Peer
--------------------------------------------------
127.127.1.0 Server (configured)

CSW-001# sh ntp peer-status
Total peers : 1
* - selected for sync, + - peer mode(active),
- - peer mode(passive), = - polled in client mode
remote local st poll reach delay vrf
-----------------------------------------------------------------------------------------------------------------------
*127.127.1.0 10.100.2.130 1 64 377 0.00000
CSW-001#

However, the client switches seem to be not responding

SWI-GF-004#sh run | i ntp
ntp broadcast client
ntp server 10.100.1.130 prefer

SWI-GF-004#sh run int vl502
Building configuration...

Current configuration : 109 bytes
!
interface Vlan502
description ********SERVER_FARM*********
no ip address
ntp broadcast client
end

SWI-GF-004#sh ntp sta
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 286.1023 Hz, actual freq is 286.1023 Hz, precision is 2**21
ntp uptime is 10600 (1/100 of seconds), resolution is 3496
reference time is 00000000.00000000 (02:07:00.000 CAT Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 1.60 msec, peer dispersion is 0.00 msec
loopfilter state is 'FSET' (Drift set from file), drift is 0.000000000 s/s
system poll interval is 8, never updated.
SWI-GF-004#

Please do let me know if there any further clarification you need.

Regards & Respect

Shaqx