Cisco Cisco Identity Services Engine Express License Bundle Troubleshooting Guide

exist.

Solution

As per the

Microsoft documentation

, it is possible to configure the LocalRootDispersion value in

the registry. Complete these steps in order to configure the registry value:

Stop the NTP service from PowerShell (optionally, enter the net stop w32time command):

PS C:\Users\Administrator> Stop-Service w32time

Set the registry value to 0:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\LocalClockDispersion

Restart the service (optionally, enter the net start w32time command):

PS C:\Users\Administrator> Start-Service w32time

Verify that the new value (0) is reported:

C:\Users\Administrator> w32tm /query /status

Leap Indicator: 0(no warning)

Stratum: 1 (primary reference - syncd by radio clock)

Precision: -6 (15.625ms per tick)

Root Delay: 0.0000000s

Root Dispersion: 0.0000000s

ReferenceId: 0x4C4F434C (source name: "LOCL")

Last Successful Sync Time: 04/08/2015 11:15:32

Source: Local CMOS Clock

Poll Interval: 6 (64s)

The ISE NTPQ tool should now report a low (48 ms) value:

ntpq>

mrv 53520 53520

assID=8400 status=9614 reach, conf, sel_sys.peer, 1 event, event_reach,

srcadr=10.62.145.72, srcport=123, dstadr=10.62.145.42, dstport=123,

leap=00, stratum=1, precision=-6, rootdelay=0.000,

rootdispersion=48.

431, refid=LOCL, reach=377, unreach=0, hmode=3,

pmode=4, hpoll=7, ppoll=7, flash=00 ok, keyid=0, ttl=0, offset=8.206,

delay=0.514, dispersion=21.595, jitter=3.456,

reftime=d96b0c49.2c834d26 Tue, Aug 4 2015 12:02:49.173,

org=d96b175c.d472ead9 Tue, Aug 4 2015 12:50:04.829,

rec=d96b175c.d2bf9803 Tue, Aug 4 2015 12:50:04.823,

xmt=d96b175c.d284b95f Tue, Aug 4 2015 12:50:04.822,

filtdelay= 0.90 0.86 0.51 0.87 0.80 0.82 0.85 0.88,

filtoffset= 7.09 5.23 8.21 6.78 2.73 8.43 1.93 9.67,

filtdisp= 15.63 17.56 19.48 21.39 23.32 25.24 27.18 29.08

This enables the synchronization to occur as expected:

ntpq> associations

ind assID status conf reach auth condition last_event cnt

===========================================================

1 53519 9014 yes yes none reject reachable 1

53520

9614 yes yes none

sys.peer

reachable 1

You can also verify this information from the CLI:

ise14/admin#

show ntp

Configured NTP Servers:

10.62.145.72