Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

How do I fix "Network Time Protocol adjustment of xxxx ms from NTP server xxxxx exceeds the allowed adjustment of xxxx ms" in my logs

0

0

Article ID: KB15170 KB Last Updated: 17 Sep 2009Version: 1.0
Summary:
I am unable to get a good NTP time adjustment from my NTP server, how do I fix that?

Symptoms:
I am seeing the following logs in my log viewer, how do I remedy the problem?

2009-08-06 07:51:55 notif No acceptable time could be obtained from any NTP server.
2009-08-06 07:51:55 notif Network Time Protocol adjustment of -9041 ms from NTP server backup2 exceeds the allowed adjustment of 3000 ms.
2009-08-06 07:51:55 notif Network Time Protocol adjustment of -9973 ms from NTP server backup1 exceeds the allowed adjustment of 3000 ms.
2009-08-06 07:51:55 notif Network Time Protocol adjustment of -9992 ms from NTP server primary exceeds the allowed adjustment of 3000 ms.

Solution:
There are different solutions to this problem:
  1. Have you recently made the switch to daylight savings time or from daylight savings time?
  2.      If so, refer to KB8077.

  3. If your desktop/laptop/notebook computer syncs with the same NTP server as your firewall, you can sync the firewall time clock with your computer:
  4. (This option is only available from the firewall WebUI)
         -In the WebUI, go to Configuration > Date/Time and click on the "Sync Time With Client" button:



  5. If your desktop/laptop/notebook computer does not sync with the same NTP server as your firewall, then you can change the threshold of the NTP adjustment to a larger value to allow the firewall to sync with the NTP server.  The default time adjustment is 3000 milliseconds, or 3 seconds.  The maximum adjustment available is 1 hour or 3600 seconds. 

  6. The command in the CLI is: set ntp max-adjustment 3600

    In the WebUI, the change is located at Configuration > Date/Time.



    In Network Security Manager, the Max Time Adjustment is at Device Admin > Date/Time



    Once you verify that the firewall is in sync with your NTP server, you can set a tighter threshold.  Three seconds is the default.

If these error messages persist after taking these steps, please open a technical support case with JTAC.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search