<div dir="ltr">It technically works. I've done this a lot. It's just Cisco isn't going to help if you're having problems with CUCM Pub not working correctly as an MTP master.</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, May 8, 2017 at 2:19 PM, Charles Goldsmith <span dir="ltr"><<a href="mailto:wokka@justfamily.org" target="_blank">wokka@justfamily.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Interesting, all subs for CUCM are pointed to the pub and cannot be changed, wonder why UCCX and CUC cannot be pointed to it.</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, May 8, 2017 at 10:25 AM, Daniel Pagan <span dir="ltr"><<a href="mailto:dpagan@fidelus.com" target="_blank">dpagan@fidelus.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div class="m_-3865071611916818840m_8346267694481041491WordSection1">
<p class="MsoNormal"><a name="m_-3865071611916818840_m_8346267694481041491__MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">Just adding my experience to this…<u></u><u></u></span></a></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">I agree and can attest to the stratum-1 server caveat below. After some time, the NTP client can get blocked and force you (the general “you”) to update your
entries in the near future. Of course multiple NTP entries can be configured but if you’re doing proactive monitoring of syslog (or specific syslog entries), or support multiple UC environments, it can get rather annoying and time consuming.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">As for pointing UC apps to the UCM publisher… I opened a TAC case a while back specifically to determine if this was officially supported. The idea was to assigned
all UC applications for a customer, per geographic region, to their most local UCM publisher for NTP services. The customer wanted to avoid IOS NTP servers, avoid using public NTP sources, and didn’t want to spin up a small *NIX VM for this purpose either.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">Long story short, and after escalating to the CE’s lead, it was determined that this configuration would not be supported, and any time synchronization issues
reported to TAC would first require the configuration be modified before continuing forward.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Courier New";color:#002060">“Cisco Call Manager might work properly as NTP Master but it is not designed for that purpose or not even tested by developer. Publisher of CUCM not supported to
act as NTP Master [for non CUCM applications].”<u></u><u></u></span></i></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">We ended up using public NTP sources.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">Hope this helps<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">- Dan<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puc<wbr>k.nether.net</a>]
<b>On Behalf Of </b>Charles Goldsmith<br>
<b>Sent:</b> Monday, May 8, 2017 10:53 AM<br>
<b>To:</b> Haas, Neal <<a href="mailto:nhaas@co.fresno.ca.us" target="_blank">nhaas@co.fresno.ca.us</a>><span><br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] CCX and NTP<u></u><u></u></span></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">To expand on this, I would point to your voice gateways with everything internal, then the voice gateways would either use an on-prem NTP server that is radio sync'd or one that Neal has advised. That way, everything is synced together
with the same source.<u></u><u></u></p><div><div class="m_-3865071611916818840h5">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">For UCCX and other apps, I point them to the UCM pub and the pub points to the voice gateways.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I've seen a lot of people advise for <a href="http://pool.ntp.org" target="_blank">
pool.ntp.org</a>, but that has bitten me. How often does an NTP process refresh from DNS? I suspect only on reboot or a restart of the NTP process. I've seen too many NTP servers go offline when using the pool addresses. Because of that, I've been sticking
with .gov based NTP on the voice gateway.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Ryan Huff, one thing about pointing to strata 1 servers, most of them have restrictions from what I've seen, while they work, they could block you for not being approved if you send too many requests. <a href="http://support.ntp.org/bin/view/Servers/StratumOneTimeServers" target="_blank">http://support.ntp.org/bin/vi<wbr>ew/Servers/StratumOneTimeServe<wbr>rs</a>
has a list, and while many have open access listed, if you look at the details, they can still have restrictions.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Just food for thought.<u></u><u></u></p>
</div>
</div></div></div><div><div class="m_-3865071611916818840h5">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Mon, May 8, 2017 at 9:20 AM, Haas, Neal <<a href="mailto:nhaas@co.fresno.ca.us" target="_blank">nhaas@co.fresno.ca.us</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal"><a name="m_-3865071611916818840_m_8346267694481041491_m_5908957790101886209__MailEndCompose"><span style="color:#1f497d">Get an on-prem NTP server, if you cant spend the money, use:</span></a><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://time.nist.gov" target="_blank">time.nist.gov</a> global address for all servers Multiple locations</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://utcnist.colorado.edu" target="_blank">utcnist.colorado.edu</a> 128.138.140.44 University of Colorado, Boulder</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://utcnist2.colorado.edu" target="_blank">utcnist2.colorado.edu</a> 128.138.141.172 University of Colorado, Boulder</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://time-nw.nist.gov" target="_blank">time-nw.nist.gov</a> 131.107.13.100 Microsoft, Redmond, Washington</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d">Really, anything with a GOV, or EDU should be good.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d">By the way, you should NEVER, EVER, EVER (can’t stress this enough) a Windows Based NTP. Every place that I have went into and removed a Windows Time
server, everything has worked better! Windows just cant do time. I went into a business with windows NTP, and the guy was checking time from about 100 NTP servers, his time was off by three minutes. Took it down to 3 and everything started to work.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<div>
<p class="MsoNormal"><span style="color:#1f497d">Thank You,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d">Neal Haas</span><u></u><u></u></p>
</div>
<p class="MsoNormal"><span style="color:#1f497d"> </span><u></u><u></u></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puc<wbr>k.nether.net</a>]
<b>On Behalf Of </b>Ben Amick<br>
<b>Sent:</b> Monday, May 8, 2017 7:12 AM<br>
<b>To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> [cisco-voip] CCX and NTP<u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">What do you guys use for NTP on your CCX hosts? I’ve been informed by TAC that “CCX does not support Windows based NTP” so I was thinking about just pointing NTP towards my CCM
hosts – is that a valid scenario? I figure that since CCM is pretty much authoritative on everything for CCX as it is it wouldn’t be a problem?<u></u><u></u></p>
<p class="MsoNormal"><span style="font-family:"Garamond",serif"> </span><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none">
<b><span style="font-size:10.0pt;font-family:"Garamond",serif;color:#3b3838">Ben Amick</span></b><u></u><u></u></p>
<p class="MsoNormal" style="text-autospace:none">
<span style="font-size:9.0pt;font-family:"Garamond",serif;color:#3b3838">Telecom Analyst</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><br>
Confidentiality Note: This message is intended for use only by the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is
not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received
this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Thank you
<u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailma<wbr>n/listinfo/cisco-voip</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/<wbr>mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>