Thanks all for all these points Thanks and regards
On 11/5/07, Alex <[EMAIL PROTECTED]> wrote: > > Everything still works fine over here: > > ARIES1[admin]# tcpdump -i eth-s5p1 -n port 123 > tcpdump: listening on eth-s5p1 > 12:48:37.364636 I 172.17.1.54.123 > 172.17.1.1.123: v3 sym_act strat 0 > poll 10 prec -6 > 12:48:37.367594 O 172.17.1.1.123 > 172.17.1.54.123: v3 sym_pas strat 2 > poll 10 prec -17 > > Again, this is an IP330, IPSO 3.8.1-BUILD033. > > According to Nokia Solutions ID: 1354798, these are the steps to > configure Nokia firewall to act as an NTP server: > > * In the Router Services section, click on NTP > * Set Enable NTP to Yes and click Apply. > * Set NTP master to Yes and click Apply. > > Clients can now use this firewall as an NTP server. Note that our NTP > server only supports Nokia IPSO based clients and is not appropriate as > a general NTP server. > > The previous sentence might be a key to the issue. Maybe the latest IPSO > versions (4.x) provide NTP server support exclusively for other IPSO > based systems? > > Alex > > cisco4ng wrote: > > I could be wrong but I do not think so because I just tested it on > > my Nokia IP380 running IPSO 4.1 build 33. The nokia is sync > > with a stratrum 1 NTP server. I have a Cisco 7206 sitting behind > > the Nokia. I tried to sync the cisco router with the Nokia and > > I get nothing. The Nokia just has IPSO, it does NOT have > > checkpoint firewall installed. Here is what I am seeing: > > > > Nokia[admin]# date > > Mon Nov 5 16:39:26 GMT 2007 > > Nokia[admin]# > > Nokia[admin]# netstat -an | grep 123 > > udp 0 0 10.102.160.33.123 *.* > > udp 0 0 192.168.1.4.123 *.* > > udp 0 0 10.102.160.1.123 *.* > > udp 0 0 172.16.84.35.123 *.* > > udp 0 0 10.102.160.49.123 *.* > > udp 0 0 10.102.160.17.123 *.* > > udp 0 0 *.123 *.* > > Nokia[admin]# > > Nokia[admin]# tcpdump -i eth4 -n port 123 > > tcpdump: listening on eth4 > > 16:36:38.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:39.566537 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:40.566456 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:41.566540 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:42.566625 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:43.566543 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:44.566508 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > 16:36:45.566539 I 10.102.160.37.123 > 10.120.160.34.123: v3 client > strat 0 poll 6 prec -18 [tos 0xc0] > > ^C > > 91 packets received by filter > > 0 packets dropped by kernel > > Nokia[admin]# > > > > As you can see, the router is sending ntp traffics to the Nokia but the > Nokia > > is not responding. > > > > How do you explain that? > > > > > > > > Alex <[EMAIL PROTECTED]> wrote: What you're saying doesn't seam > right. We use our IP330s and IP650s as > > primary NTP servers and one of the routers as secondary time > > synchronization source. This has been working just fine for years ... > > > > Alex > > > > cisco4ng wrote: > > > >> You can not use the Nokia as an NTP server for other devices. > >> The NTP on the Nokia only functions as an NTP client. > >> > >> Cisco routers/switches, on the other hand, can function > >> as ntp servers. > >> > >> > >> Lari Luoma wrote: tcpdump on IPSO. > >> > >> -L- > >> > >> > >> > >> -----Original Message----- > >> From: Mailing list for discussion of Firewall-1 on behalf of john > maverick > >> Sent: Mon 11/5/2007 9:08 AM > >> To: [email protected] > >> Subject: [FW-1] Nokia NTP troubleshooting > >> > >> Hi, > >> > >> We have a Nokia IP560 which is the NTP server for all the devices in > our > >> network...of late these devices Cisco routers/switches when CLI ed for > NTP > >> satus show the clocks are off sync. > >> > >> The NTP on IP560 hooks onto NTP server in the internet > >> > >> Other than Sh ntp server and active,debug -x 123 ..is there anything > else > >> which can throw light on as to why the devices are not synchronising > with > >> the IP560. > >> > >> > >> > >> Appreciate help > >> > >> Thanks all > >> > >> ================================================= > >> To set vacation, Out-Of-Office, or away messages, > >> send an email to [EMAIL PROTECTED] > >> in the BODY of the email add: > >> set fw-1-mailinglist nomail > >> ================================================= > >> To unsubscribe from this mailing list, > >> please see the instructions at > >> http://www.checkpoint.com/services/mailing.html > >> ================================================= > >> If you have any questions on how to change your > >> subscription options, email > >> [EMAIL PROTECTED] > >> ================================================= > >> > >> > >> ================================================= > >> To set vacation, Out-Of-Office, or away messages, > >> send an email to [EMAIL PROTECTED] > >> in the BODY of the email add: > >> set fw-1-mailinglist nomail > >> ================================================= > >> To unsubscribe from this mailing list, > >> please see the instructions at > >> http://www.checkpoint.com/services/mailing.html > >> ================================================= > >> If you have any questions on how to change your > >> subscription options, email > >> [EMAIL PROTECTED] > >> ================================================= > >> > >> > >> __________________________________________________ > >> Do You Yahoo!? > >> Tired of spam? Yahoo! Mail has the best spam protection around > >> http://mail.yahoo.com > >> > >> ================================================= > >> To set vacation, Out-Of-Office, or away messages, > >> send an email to [EMAIL PROTECTED] > >> in the BODY of the email add: > >> set fw-1-mailinglist nomail > >> ================================================= > >> To unsubscribe from this mailing list, > >> please see the instructions at > >> http://www.checkpoint.com/services/mailing.html > >> ================================================= > >> If you have any questions on how to change your > >> subscription options, email > >> [EMAIL PROTECTED] > >> ================================================= > >> > >> > >> > >> > >> > >> > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > __________________________________________________ > > Do You Yahoo!? > > Tired of spam? Yahoo! Mail has the best spam protection around > > http://mail.yahoo.com > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > > > > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
