Time not syncing in Fortigate Firewall

Question

I am using Fortigate 100G in HA and running Firmware 7.2.9. The issues I am facing is the interface is able to reach the NTP Server.

NTP Server : 192.168.1.10

FGT MGMT : 192.168.1.4

I have added a MGMT interface under dedicated management interface, which changes the MGMT interface in different vdom and getting removed in interface GUI. I want to get the time through management interface. I have configured NTP with below config

set ntpsync enable
set type custom
set syncinterval 1
config ntpserver
edit 1
set server "192.168.1.10"

once I try to add command "set source ip" it is showing below error "192.168.1.4 does not match any interface ip in vdom root." , as Management interface is removed from root vdom

So my question here is can we configured ntp on dedicated management interface vdom, or how can we achive.

Also I am referring to below docs in which we can set the interface under ntp server-->edit 1, but I cannot see it in my firewall.

https://docs.fortinet.com/document/fortiproxy/7.2.9/cli-reference/98620/config-system-ntp

dingjerry_FTNT · Accepted Answer

Hi @himanshusince1989 ,

Actually, I remember that you want to use the mgmt interface as the OOB access to the Primary and Secondary FGTs.

So:

1) Disable the dedicated management interface:

config system dedicated-mgmt

set status disable

end

2) Configure HA dedicated management interface:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Reserved-Management-Interface/ta-p/190132

Search for "For v6.4.x and newer versions" section.

3) Enable the "ha-direct" setting in the HA configuration.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Allow-NTP-synchronization-when-HA-cluster/ta-p/307206

You don't need to set the source-ip setting in the NTP configurations.

funkylicious · Answer

Hi,Take a look at this doc, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Access-NTP-Server-Connected-directly-with-Non/ta-p/295479 .Also, the link you are using is for FortiProxy and not FortiGate, couple of differences in CLI but the same principle, https://docs.fortinet.com/document/fortigate/7.2.9/cli-reference/105110478

Sign up

Login with SSO

Login to the community

Login with SSO