Troubleshooting Tip: How to troubleshoot NTP issues on FortiADC

[gsharma]

Description	This article describes how to troubleshoot NTP-related issues on FortiADC.
Scope	FortiADC.
Solution	For NTP-related issues, such as NTP not syncing correctly with NTP servers (internal or external) or reachability issues, there are some troubleshooting steps to perform to speed up resolution. Start by taking debugs and packet captures. Open FortiADC via SSH (putty or secure CRT). Run the commands below:   diagnose debug module ntpd 7 diagnose debug enable Run for a few minutes, depending on the NTP sync interval time. To disable, run the commands below: diagnose debug disable diagnose debug module ntpd 0 Packet captures can be run via GUI/CLI: Run Packet capture by selecting the interface and port number, NTP port (123). Note: Follow this document to see about packet capture on FortiADC: Packet capture Check the state of ntpd process: Run the command below and find the process name ntp: # fn ps 10433 root 24716 S /bin/ntpd 10552 root 24716 S /bin/ntpd 10553 root 24716 S /bin/ntpd Check event logs if there are any events related to NTP-related issues. One more workaround to try: toggle the Set time setting from NTP to Manual settings and save it. Then, in 1 minute, put it back to NTP again and save it. This will restart the NTP process on FortiADC, and the process-ids for NTP will also change. Note: If the steps listed above do not resolve the issue, submit a ticket on the Support Portal with the information collected in the previous steps. Related document: Configuring system time NTP