Everything still works fine over here:
ARIES1[admin]# tcpdump -i eth-s5p1 -n port 123
tcpdump: listening on eth-s5p1
12:48:37.364636 I 172.17.1.54.123 > 172.17.1.1.123: v3 sym_act strat 0
poll 10 prec -6
12:48:37.367594 O 172.17.1.1.123 > 172.17.1.54.123: v3 sym_pas strat 2
poll 10 prec -17
Again, this is an IP330, IPSO 3.8.1-BUILD033.
According to Nokia Solutions ID: 1354798, these are the steps to
configure Nokia firewall to act as an NTP server:
* In the Router Services section, click on NTP
* Set Enable NTP to Yes and click Apply.
* Set NTP master to Yes and click Apply.
Clients can now use this firewall as an NTP server. Note that our NTP
server only supports Nokia IPSO based clients and is not appropriate as
a general NTP server.
The previous sentence might be a key to the issue. Maybe the latest IPSO
versions (4.x) provide NTP server support exclusively for other IPSO
based systems?
Alex
cisco4ng wrote:
I could be wrong but I do not think so because I just tested it on
my Nokia IP380 running IPSO 4.1 build 33. The nokia is sync
with a stratrum 1 NTP server. I have a Cisco 7206 sitting behind
the Nokia. I tried to sync the cisco router with the Nokia and
I get nothing. The Nokia just has IPSO, it does NOT have
checkpoint firewall installed. Here is what I am seeing:
Nokia[admin]# date
Mon Nov 5 16:39:26 GMT 2007
Nokia[admin]#
Nokia[admin]# netstat -an | grep 123
udp 0 0 10.102.160.33.123 *.*
udp 0 0 192.168.1.4.123 *.*
udp 0 0 10.102.160.1.123 *.*
udp 0 0 172.16.84.35.123 *.*
udp 0 0 10.102.160.49.123 *.*
udp 0 0 10.102.160.17.123 *.*
udp 0 0 *.123 *.*
Nokia[admin]#
Nokia[admin]# tcpdump -i eth4 -n port 123
tcpdump: listening on eth4
16:36:38.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:39.566537 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:40.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:41.566540 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:42.566625 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:43.566543 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:44.566508 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
16:36:45.566539 I 10.102.160.37.123 > 10.120.160.34.123: v3 client strat 0
poll 6 prec -18 [tos 0xc0]
^C
91 packets received by filter
0 packets dropped by kernel
Nokia[admin]#
As you can see, the router is sending ntp traffics to the Nokia but the Nokia
is not responding.
How do you explain that?
Alex <[EMAIL PROTECTED]> wrote: What you're saying doesn't seam right. We use our IP330s and IP650s as
primary NTP servers and one of the routers as secondary time
synchronization source. This has been working just fine for years ...
Alex
cisco4ng wrote:
You can not use the Nokia as an NTP server for other devices.
The NTP on the Nokia only functions as an NTP client.
Cisco routers/switches, on the other hand, can function
as ntp servers.
Lari Luoma wrote: tcpdump on IPSO.
-L-
-----Original Message-----
From: Mailing list for discussion of Firewall-1 on behalf of john maverick
Sent: Mon 11/5/2007 9:08 AM
To: [email protected]
Subject: [FW-1] Nokia NTP troubleshooting
Hi,
We have a Nokia IP560 which is the NTP server for all the devices in our
network...of late these devices Cisco routers/switches when CLI ed for NTP
satus show the clocks are off sync.
The NTP on IP560 hooks onto NTP server in the internet
Other than Sh ntp server and active,debug -x 123 ..is there anything else
which can throw light on as to why the devices are not synchronising with
the IP560.
Appreciate help
Thanks all
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
