Unity Express rejecting time servers

[jamesbruce]

Whatever time server I add to Call Manager Express/Unity, it shows as "rejected" , except when the time server is the router itself...anyone know why?

[Brandon Buffin]

Do you have a default gateway configured for the service engine interface? It would look something like:

interface Service-Engine0/0

service-module ip default-gateway

Hope this helps. If so, please rate the post.

Brandon

[jamesbruce]

Hi Brandon, thanks for taking the time to answer. I really have almost zero experience with unity/CMS: in answer to your question hers is the output of the show int Service-Engine command and the ip route command:

rtr_2821#show int Service-Engine 0/0

Service-Engine0/0 is up, line protocol is up

Hardware is I82559FE, address is 000f.352f.0213 (bia 000f.352f.0213)

Description: VNS UnityExpress $FW_INSIDE$

Interface is unnumbered. Using address of GigabitEthernet0/1.2 (192.168.79.2)

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

ARP type: ARPA, ARP Timeout 04:00:00

Last input 00:00:04, output 00:00:04, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

660635 packets input, 152788873 bytes, 0 no buffer

Received 884 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 input packets with dribble condition detected

861277 packets output, 180747825 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 1 no carrier

0 output buffer failures, 0 output buffers swapped out

rtr_2821#

rtr_2821#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S 172.16.0.0/16 is directly connected, Null0

192.168.79.0/24 is variably subnetted, 2 subnets, 2 masks

S 192.168.79.3/32 is directly connected, Service-Engine0/0

C 192.168.79.0/24 is directly connected, GigabitEthernet0/1.2

S 10.0.0.0/8 is directly connected, Null0

63.0.0.0/24 is subnetted, 2 subnets

C 63.66.107.0 is directly connected, Vlan2

C 63.67.79.0 is directly connected, GigabitEthernet0/0

S* 0.0.0.0/0 is directly connected, Serial0/0/0.1

[Brandon Buffin]

If you do a show run, do you see the service-module ip default-gateway command I mentioned above under interface Service-Enging0/0?

Brandon

[jamesbruce]

here is the default gateway listed from the show run, but still, whatever NTP server I add besides the one pointing to the router itself shows as rejected under the CUE web interface, but I can ping the ntp servers from the command line...

interface Service-Engine0/0

description VNS UnityExpress $FW_INSIDE$

ip unnumbered GigabitEthernet0/1.2

service-module ip address 192.168.79.3 255.255.255.0

service-module ip default-gateway 192.168.79.1

This is the only one listed at present, since I removed the other two I had added:

rtr_2821#show ntp associations

address ref clock st when poll reach delay offset disp

*~127.127.7.1 .LOCL. 0 14 64 377 0.0 0.00 0.0

* master (synced), # master (unsynced), + selected, - candidate, ~ configured

Now when I add say, the tik and tok ntp servers, or any other publically accessible time server, it shows as rejected, what i have read is that the reason it shows as rejected is that maybe the time server can't communicate or authenticate , but as I sad the router can ping them so I'm a little lost...

[Brandon Buffin]

Can you ping the ntp server from the CUE CLI, such as:

service-module service-engine0/0 session

ping ntpserver

Are you using an IP address or FQDN for the ntp server?

Brandon

[jamesbruce]

yes, i can ping the ntp server from the router and it is specified as an ip address...

[Brandon Buffin]

When you say you can ping from the router, are you pinging from the IOS or from the CUE CLI?

Brandon

[jamesbruce]

Hey ther!..Well, it seems like my employer 9 who set this up in the first place, ) does not want a router OUT from the CUE, so, I guess this is a non-issue as the CUE is getting its ntp server from Active directory and all the ip phones, client computers, and voicemail are are displaying the correct time settings...thanks for your help, i really appreciate it!