topic Re: NTP Sync 10.1.6 PA-220 in General Topics

NTP Sync 10.1.6 PA-220

CBrookes — Tue, 13 Sep 2022 03:14:47 GMT

Hi all,

I'm getting this NTP status message.

I'm quite sure it did initially sync but then reverts to this state.

What exactly does "rejected" mean? The NTP server was reachable but has it been knocked back for some reason.

NTP state:

NTP not synched, using local clock

NTP server: xxxx

status: rejected

reachable: yes

authentication-type: none

Thanks,

Clinton

Re: NTP Sync 10.1.6 PA-220

OtakarKlier — Tue, 13 Sep 2022 20:10:06 GMT

Hello,

Sounds like you ate using authenticated NTP? If yes, I would check with the NTP server owner to make sure you have the correct credentials.

Regards,

Re: NTP Sync 10.1.6 PA-220

CBrookes — Wed, 14 Sep 2022 01:16:02 GMT

Not authenticated no, just a windows domain controller.

Re: NTP Sync 10.1.6 PA-220

OtakarKlier — Wed, 14 Sep 2022 14:51:39 GMT

And on the PAN none of the authentication for NTP is configured?

Re: NTP Sync 10.1.6 PA-220

CBrookes — Thu, 15 Sep 2022 00:29:24 GMT

Correct

Re: NTP Sync 10.1.6 PA-220

OtakarKlier — Thu, 15 Sep 2022 17:18:25 GMT

Interesting. Does the traffic out of the management port flow back through the PAN to get to the NTP server? I'm really out of thoughts. Perhaps a support case.

Re: NTP Sync 10.1.6 PA-220

CBrookes — Tue, 20 Sep 2022 01:36:09 GMT

I got it syncing eventually with just one host.

Then all of sudden it syncs. Syncs many times for some time. Then goes back to being rejected.

NTP state: NTP not synched, using local clock NTP server: xxx status: rejected reachable: no authentication-type: none admin@xxx> show ntp NTP state: NTP not synched, using local clock NTP server: xxx status: rejected reachable: yes authentication-type: none admin@xxx> show ntp NTP state: NTP not synched, using local clock NTP server: xxx status: rejected reachable: yes authentication-type: none

admin@xxx> show ntp NTP state: NTP synched to xxx NTP server: xxx status: synched reachable: yes authentication-type: none admin@xxx> show ntp NTP state: NTP synched to xxx NTP server: xxx status: synched reachable: yes authentication-type: none admin@xxx> show ntp NTP state: NTP synched to xxx NTP server: xxx status: synched reachable: yes authentication-type: none

Re: NTP Sync 10.1.6 PA-220

kandaspr — Mon, 24 Apr 2023 03:36:13 GMT

Hi Brooks,

Could you please share the fix you applied to make it as "synched". I also have same issue.

Thanks

Re: NTP Sync 10.1.6 PA-220

kandaspr — Fri, 05 May 2023 07:14:13 GMT

This issue is fixed after decreasing the LocalClockDispersion value on the Windows NTP server

Navigate to the following Windows registry key:
SYSTEM\CurrentControlSet\Services\W32Time\Config\LocalClockDispersion
Set the value to 0.
Restart the W32time service on Windows with the following command:
net stop w32time
net start w32time