Skip site navigation (1)Skip section navigation (2)
Date:      06 Feb 2001 14:39:13 -0800
From:      Kevin Mills <kmills@a6l.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: ntpd across subnets?
Message-ID:  <85ae7zxwq6.fsf@diablo.in.a6l.net>
In-Reply-To: "Kevin Mills"'s message of "01 Feb 2001 11:04:03 -0800"
References:  <858znqdy3g.fsf@diablo.in.a6l.net>

next in thread | previous in thread | raw e-mail | index | archive | help
"Kevin Mills" <kmills@a6l.net> writes:

> I need some help with ntpd.  Here is my network:
> 
> Firewall -+ Internal network, subnet A
>           | 
>           |                     +- Isolated subnet B
>           + Triple homed server -
>                                 +- Isolated subnet C
> 
> 
> I'd like the firewall (which is dual homed) to synchronize its time with 
> the outside world.  The internal network would then sync with the Firewall
> (would all machines on subnet A use the broadcastclient option?).  Somewhere 
> on this internal network lives a triple homed server that has 2 different 
> isolated test networks attached to it.  I'd like these two subnets (B and C) 
> to get their time information from the triple homed server.
> Note: subnets B and C have no access to subnet A.

More info:

I now have the triple homed server communicating and syncing with
the firewall.  Also, the triple homed server is broadcasting
onto subnet B and C (I can see this with tcpdump).  However, each
of the clients on subnet B and C never process the packets.

Here is a sample "sysstat" from ntpdc on one of the subnet B boxes:

system uptime:          14105
time since reset:       14105
bad stratum in packet:  0
old version packets:    28
new version packets:    219
unknown version number: 0
bad packet length:      0
packets processed:      0
bad authentication:     0
limitation rejects:     0

Why zero packets processed?

Running ntpdate -d from subnet B or C shows:

transmit(10.0.0.1)
transmit(10.0.0.1)
transmit(10.0.0.1)
transmit(10.0.0.1)
transmit(10.0.0.1) ...

For some reason, the B and C clients aren't communicating correctly with 
the triple homed server.  Yet, his netstat shows udp port 123 open on each
interface.  People on subnet A have no trouble communicating with the 
firewall's ntpd.

Ideas anyone?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?85ae7zxwq6.fsf>