Avatar of pzozulka
pzozulka
 asked on

NetApp NTP

We recently started to receive error alerts from our NetApp monitoring services saying that our NetApp is not NTP synchronized with any peer, so it's time may be incorrect. It says:

NTP is running, but no peers have passed the selection process. The local time may be too far off; or the configured NTP peers may not be reachable.

I check the ntp.conf to ensure valid time servers are listed, I also turned ON/OFF "options timed.enable".

Next, I looked into this article: https://kb.netapp.com/support/index?page=content&actp=LIST&id=S:1012660

After following all the instructions, I was able to see the error message that might be truly the root cause of the problem: I think it says the NTP server is reachable, but it was rejected by the following reason:

It says flash=400 not_proventic.

At this point I'm stuck and not sure how to proceed further. Any help would be greatly appreciated.
Storage

Avatar of undefined
Last Comment
FilipZahradnik

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
FilipZahradnik

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
pzozulka

ASKER
We are running 8.1 7-mode.

We are trying to sync with our domain controller which has the role PDC emulator.

I tried running the command ntpq -p <ip of NetApp management port>
And get results which indicate reach=377 meaning there are no communication problems, however it is getting rejected as an NTP peer.
FilipZahradnik

Did you manage to have a look at this article:

How to determine if a Windows Domain Controller is a suitable NTP server for Data ONTAP 8
https://kb.netapp.com/support/index?page=content&id=1013468

It describes an issue where a DC might be rejected as a time source because it does not offer the required accuracy.
pzozulka

ASKER
That setting is only applicable if using the local CMOS clock of the DC -- which in our case we aren't. Our DC uses an external internet time source.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
FilipZahradnik

Interesting.

As a troubleshooting step, you can try to sync directly with the external NTP source.

If that works, then the issue is likely related to the fact that your time source is a Windows DC. If if fails, then the issue is probably an NTP or ONTAP problem, in which case NetApp Support should be able to help.
pzozulka

ASKER
Can't sync directly because our NetApps are on an internal VLAN which doesn't have access to outside world.
FilipZahradnik

Ok, can you try syncing with another internal NTP that is not a Windows DC - e.g. a Cisco router?
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
pzozulka

ASKER
I am able to connect to other time sources. By the way, it magically started working...out of the blue.

I'm really stumped.
FilipZahradnik

Aaah, the joys of random tinkering... :)

Well done.