Forum Discussion

Preet_pk's avatar
Preet_pk
Icon for Cirrus rankCirrus
Sep 25, 2024

F5 - System Times of Devices Do Not Match

Hi,

I need some help, as i am seeing below "System times of devices do not match" error in F5 running on HA. Please let me know how to troubleshoot this without impacting F5 production traffic.  

Below error:

System Times of Devices Do Not Match

One or more system times of the devices in the device trust do not match the system time of the local device. Auto or manual device group sync operations may fail.

Verify that the NTP Settings on all devices are properly configured and that the system times are equal.

  • /Common/F5primary.local is 6 seconds ahead
application delivery
  • zamroni777's avatar
    zamroni777
    Icon for Nacreous rankNacreous
    Sep 25, 2024

    have you set both active and standby node to ntp time server with correct time?

    if the difference to ntp server is less than 1000 seconds, the system should drift the time by itself until they match the ntp server.
    larger than 1000 seconds will need restart ntpd.

    https://my.f5.com/manage/s/article/K35119082

    • Preet_pk's avatar
      Preet_pk
      Icon for Cirrus rankCirrus
      Sep 30, 2024

      Thanks for the response,  HA Active F5 is showing 7 sec ahead. Will wait for the system to sync time with ntp server automatically. In case time sync still fails, will restart ntpd daemon cause any production impact or any HA impact.

      • Aswin_mk's avatar
        Aswin_mk
        Icon for Cumulonimbus rankCumulonimbus
        Sep 30, 2024

        Preet_pk

         

        Please go through the link -https://my.f5.com/manage/s/article/K7017

        Impact of the restart also mentioned in the link

         

        Br

        Aswin 

  • Amine_Kadimi's avatar
    Amine_Kadimi
    Icon for MVP rankMVP
    Sep 27, 2024

    Hi,

    You need to have NTP servers configured on your devices (at least one server but preferably more).

    Then checkfrom big-ip linux cli (not tmsh) whether the system can sync to one of the NTP servers using the command:

    ntpq -np

    You should see your NTP servers list, and one of them must have a * char before its address.

    For more troubleshooting details: https://my.f5.com/manage/s/article/K10240