Can I use Same NTP server configured in Firewall to gatekeeper

[Yogesh Paradkar]

I have configured NTP server in my VCSc Expressway it synchronized properly, but I am unable to configured it in my Gatekeeper VCSc with same NTP server address which is configured in VCScExpresway.

Please suggest

[Paul Woelfel]

Did you check the firewall?

[Yogesh Paradkar]

Yes I have checked it, its fully synchronized with my firewall. I am using "in.pool.ntp.org" for NTP server1, because we dont have NTP server in our premises.

Message was edited by: Yogesh Paradkar

[Paul Woelfel]

What does the NTP Status page show?

You could use your VCS Expressway as NTP Server for your VCS Control. So you can make sure, they won't drift appart.

[Yogesh Paradkar]

hi, NTP has not get synchronized with same NTP address with VCSc gatekeeper..showing me unsynchronized

[Martin Koch · Accepted solution]

Hello!

You are using in.pool.ntp.org. This is not a single ntp server, this is a pool of servers,

so you might see different ntp servers and they might also change and sometimes

it can also happen that yo will get one which is down.

If I look it up here I for exmple get:

$host in.pool.ntp.org
in.pool.ntp.org has address 113.30.137.34
in.pool.ntp.org has address 119.226.101.131

and a bit later I got:

$ host in.pool.ntp.org
in.pool.ntp.org has address 123.108.225.6
in.pool.ntp.org has address 125.62.193.121

Anyhow you want to configure multiple NTP server addresses.

So if you want to use that zone (india):

* you should configure these three host names as described in here: http://www.pool.ntp.org/zone/in

* see that DNS resolving works (that can also be the problem here)

* that you have proper internet access

* see that the firewall is open to 123 to any host on the internet

* if you are not in india use a different zone

On the VCS under Maintanance > Tools > Network utilities you could check for example if you can resolve DNS and ping/traceroute external hosts.

The other option is to find at least 2 NTP servers which you know and which you can use and set them up,

then you could lock down the specific ips in the firewall, if not, it has to be open to all.

Its also not hard to set up your own NTP server by the way.