pan-os 8.0 ntp not sync

[SSergey]

Hi,

I have a problem with test VM-300, NTP not sync and use local clock.

But if i try to set timezone - clock set not correct

>show ntp

NTP state:
NTP not synched, using local clock
NTP server: 178.124.164.107
status: rejected
reachable: yes
authentication-type: none

ping source 192.168.18.227 host 178.124.164.107
PING 178.124.164.107 (178.124.164.107) from 192.168.18.227 : 56(84) bytes of data.
64 bytes from 178.124.164.107: icmp_seq=1 ttl=55 time=2.63 ms
64 bytes from 178.124.164.107: icmp_seq=2 ttl=55 time=2.51 ms
^C

> show system info

ip-address: 192.168.18.227
netmask: 255.255.255.0
default-gateway: 192.168.18.254
ip-assignment: static
ipv6-address: unknown
ipv6-link-local-address: fe80::250:56ff:feb0:6848/64
ipv6-default-gateway:
mac-address: 00:50:56:b0:68:48
time: Wed Feb 7 13:23:05 2018   (real time 10:18)
uptime: 0 days, 15:38:55
family: vm
model: PA-VM
vm-license: VM-300
vm-mode: VMWare ESXi
sw-version: 8.0.7

[kiwi · Accepted solution]

Hi @SSergey,

Can you check under VMware Tools, if "Synchronize guest time with host" is enabled ?

If so, can you please disable the option as a test ?

If all fails, I'd go with capturing the NTP traffic (How-To-Packet-Capture-tcpdump-On-Management-Interface) or check the logs (sysdagent.log) for more information and reach out to TAC.

Cheers,

-Kiwi.

[SSergey]

Ok, i try to disable this otions.

[SSergey]

@kiwi,

I'm disable this option, now time is correct.

ntp  state  sync 

> show ntp

NTP state:
NTP synched to 178.124.164.107
NTP server: 178.124.164.107
status: synched
reachable: yes
authentication-type: none

> show clock

Wed Feb 7 13:22:38 MSK 2018

> show clock more

dataplane time: Wed Feb 07 13:22:41 MSK 2018

Thanks for help

[kiwi]

Great and thanks for the update !

Cheers !

-Kiwi.