[NWA130BE] - NTP sync delayed

Options
Maverick87
Maverick87 Posts: 359 image  Master Member
Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
in Wireless

Hello,

I've an NWA130BE that use an internal NTP server.

image.png

As per image, the current datetime is 20/08 @ 11:23AM instead the AP have 19/08 @ 23:23.
The uptime is more or less 3hrs

image.png

This is the System log after power up the AP:

image.png

My network goes down in the night, and wake up on morning.
The problem is that the AP finishes booting before 192.168.100.1 is available, so NTP effectively fails to sync. The problem is that there don't seem to be any retries for the next 3 hours.

I've collected the information, if you would I'll send on PM.

Thank you

«1

All Replies

  • Maverick87
    Maverick87 Posts: 359 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    Options

    This is when the AP start syncronization:

    image.png

    As you can see the system as "started" at 19/08 20:36 (8:36PM) and the sync was successfully completed at 20/08 02:35AM, so 6 hours after the system start-up.
    So, if the NTP don't sync at first time, the system wait 6 hours to retry to sync.
    I've collected the logs, as before if you would the log, ask me :)

  • PeterUK
    PeterUK Posts: 4,693 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    I blocked the NTP powered off the AP then on it kept time so either you power off your AP longer over night that time does not keep or you changed the time set back to NTP that not up yet for time to be wrong? or maybe the battery in your AP is not good to keep time moving when off?

  • Maverick87
    Maverick87 Posts: 359 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    edited August 20
    Options

    Hi Peter,
    No, I don't think so.

    192.168.100.1 is the firewall interface that also acts as an NTP server.

    Probably, since when I shut down the infrastructure at night, I turn off everything (including the AP and firewall), the AP finishes booting before the firewall can distribute the precise time.
    So the AP probably uses a default time (it's exactly the last time in UTC format — I've shutdown my network on 19/08 10:35PM UTC+2 Rome/Europe, in UTC 8:35PM) when it can't find the NTP server.
    The problem is that the firewall then goes up and running, providing the correct time, but the AP doesn't resynchronize.

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,683 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @Maverick87 ,

    You experienced a 6-hour delay in NTP synchronization after the initial sync attempt failed. This is because on Standalone AP mode, if the device fails its initial NTP synchronization, it automatically retries every 6 hours — which explains the gap you observed between boot-up and the successful sync.

    Since your setup relies on the firewall as the internal NTP server, and both devices power on together, the AP may boot faster and miss the NTP server on its first attempt. As a workaround, we'd recommend using a well-known public NTP server, so the AP has a reliable time source available even if the local firewall isn't fully up yet.

    Zyxel_Judy

  • Maverick87
    Maverick87 Posts: 359 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    Options

    Hi @Zyxel_Judy,

    I figured it was the 6-hour problem. What I don't understand is why a 6-hour timeout is used.
    Isn't it possible to poll with a shorter time, and possibly increase it if it fails?

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,683 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @Maverick87 ,

    We'll raise this as a feature request to shorten the NTP sync retry interval or use another mechanism to sync the time of Standalone AP.

    In the meantime, if you'd prefer not to rely on a public NTP server, a workaround is to wait until the firewall has fully booted up, then go to the AP's GUI's CONFIGURATION > System > Date/Time and click the "Sync Now" button to manually trigger the time sync.

    Zyxel_Judy

  • Maverick87
    Maverick87 Posts: 359 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    edited August 26
    Options

    Hi @Zyxel_Judy,
    sorry but I understand the problem; an idea was already floated some time ago to exclude public IP addresses when setting up a local NTP.
    But I didn't think that:

    • The retry would be every 6 hours;
    • If the local NTP fails/times out, I don't know if NTP switches to public IP addresses.

    In any case, it seems fairly normal to me (because it works that way on various Windows/Linux clients/servers) for shorter retries to occur, and normally, progressive retries are performed (1 min/2 min/5 min/10 min/30 min/1 hr/2 hrs, etc.).
    The problem with correcting the 6 hours isn't a new feature; it's actually a bug and should be fixed.

    Also, I know how to resync the date/time, but obviously it is very inconvenient to do so.

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,683 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @Maverick87 ,

    Could you share the reason you need accurate time on the Standalone AP — is it mainly for log viewing purposes?

    To clarify: the 6-hour retry interval after an initial NTP sync failure at boot-up is our current spec, not a bug.

    There's currently no roadmap to change this behavior; however, we'll continue to monitor feedback from other Standalone AP users in similar environments.

    If you'd like the AP to sync NTP more frequently, you could consider adding it to the Nebula Control Center — in that mode, the AP will keep retrying NTP sync until it succeeds.

    Zyxel_Judy

  • Maverick87
    Maverick87 Posts: 359 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    Options

    Hi @Zyxel_Judy,

    sorry, but what response is it? For you it's normal that a device could not get the date/time, and the only plausible retry is only 6 hours later? If I set an internal NTP service, is because all devices are at the same clock standard.

    It's for log but also for debug (know when a device are connected or disconnected), and is not normal to change the NTP on a public server or change from standalone to Nebula controlled only because, if the NTP not response, you arbitrary set a retry after 6 hours.

    Sorry, but this is a bug, also because if I put an external NTP Service and the AP don't have internet at the time of sync, the next sync are 6 hrs later, also if I use an external NTP Service?

    Before an internal NTP was used correctly, more frequent retries were performed.
    The 6-hour problem arose now, after the change was requested to take the internal NTP.
    Furthermore, there still appears to be no backup NTP if the internal one isn't responding.

  • PeterUK
    PeterUK Posts: 4,693 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited August 26
    Options

    It does seem odd that Standalone behaviour is different to Nebula when it come to NTP retry and what to do on fail. Could the reason be not spam requests? but 6 hours does seem a long time to have to wait….that to me looks to be intended after sync succuss but then why are FLEX H doing sync every 65 seconds like time checking is more important on a USG then AP or switch?

Categories

Wireless Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）