NTP does not work



  • What is the best way to troubleshoot the NTP server? I have configured one NTP server, then three separated by a space, stopped and restarted  the service. I have tried to connect using netcat. My computer don't seem to be getting updates from the pfsense router. What else can I try to see if it is working?



  • Did you set the NTP server page to LAN?

    Otherwise give it an hour or two after you reboot the router. It takes time before the client will trust your server…



  • I did set the NTP server page to LAN. This is the output of "ntpq -np"

    192.168.1.1      .INIT.          16 u    -  512    0    0.000    0.000   0.000
    

    Any ideas to troubleshoot this?
    So far I have used wireshark and I see the clients query the pfsense router on port 123.



  • I tried having a windows box update itself from the pfsense box and it said:

    An error occurred while syncronizing with 192.168.1.1
    


  • On your system/general setup page…

    What does your time servers entry look like?

    You might try the pfsense default for a bit...  Let it go for several hours then try.

    0.pfsense.pool.ntp.org



  • same here on embedded 2.0-RC3  (i386) built on Tue Jul 12 22:24:23 EDT 2011

    ntpd does not answer my requests:

    
    devex:/home/cm# ntpdate 10.10.1.1
    14 Jul 16:46:34 ntpdate[30546]: no server suitable for synchronization found
    
    


  • On your system/general setup page…

    What does your time servers entry look like?



  • 
    Time zone Europe/Berlin
    NTP time server 0.pfsense.pool.ntp.org
    
    

    Otherwise give it an hour or two after you reboot the router. It takes time before the client will trust your server…

    Yes, now it works! Next time i am don't get impatient. Thanks! :)



  • @chpalmer:

    Otherwise give it an hour or two after you reboot the router. It takes time before the client will trust your server…

    This - openntpd needs some time before it considers itself accurate enough for syncing clients (why it doesn't log that…another story). If you get a pcap of the NTP traffic you'll see in the response it has the code set indicating that. You have to wait an hour or two after enabling it.


Log in to reply