I could be wrong but I do not think so because I just tested it on my Nokia IP380 running IPSO 4.1 build 33. The nokia is sync with a stratrum 1 NTP server. I have a Cisco 7206 sitting behind the Nokia. I tried to sync the cisco router with the Nokia and I get nothing. The Nokia just has IPSO, it does NOT have checkpoint firewall installed. Here is what I am seeing:
Nokia[admin]# date Mon Nov 5 16:39:26 GMT 2007 Nokia[admin]# Nokia[admin]# netstat -an | grep 123 udp 0 0 10.102.160.33.123 *.* udp 0 0 192.168.1.4.123 *.* udp 0 0 10.102.160.1.123 *.* udp 0 0 172.16.84.35.123 *.* udp 0 0 10.102.160.49.123 *.* udp 0 0 10.102.160.17.123 *.* udp 0 0 *.123 *.* Nokia[admin]# Nokia[admin]# tcpdump -i eth4 -n port 123 tcpdump: listening on eth4 16:36:38.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:39.566537 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:40.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:41.566540 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:42.566625 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:43.566543 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:44.566508 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] 16:36:45.566539 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0 poll 6 prec -18 [tos 0xc0] ^C 91 packets received by filter 0 packets dropped by kernel Nokia[admin]# As you can see, the router is sending ntp traffics to the Nokia but the Nokia is not responding. How do you explain that? Alex <[EMAIL PROTECTED]> wrote: What you're saying doesn't seam right. We use our IP330s and IP650s as primary NTP servers and one of the routers as secondary time synchronization source. This has been working just fine for years ... Alex cisco4ng wrote: > You can not use the Nokia as an NTP server for other devices. > The NTP on the Nokia only functions as an NTP client. > > Cisco routers/switches, on the other hand, can function > as ntp servers. > > > Lari Luoma wrote: tcpdump on IPSO. > > -L- > > > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 on behalf of john maverick > Sent: Mon 11/5/2007 9:08 AM > To: [email protected] > Subject: [FW-1] Nokia NTP troubleshooting > > Hi, > > We have a Nokia IP560 which is the NTP server for all the devices in our > network...of late these devices Cisco routers/switches when CLI ed for NTP > satus show the clocks are off sync. > > The NTP on IP560 hooks onto NTP server in the internet > > Other than Sh ntp server and active,debug -x 123 ..is there anything else > which can throw light on as to why the devices are not synchronising with > the IP560. > > > > Appreciate help > > Thanks all > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > > > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
