Junos OS

I can't get NTP to sync on Juniper MX480. I am getting the following messages:

ntpq: Can't find host localhost
ntpq: Can't find host localhost
xntpd[25557]: NTP Server Unreachable
last message repeated 3 times
last message repeated 5 times
ntpq: Can't find host localhost
ntpq: Can't find host localhost
xntpd[25557]: NTP Server Unreachable

here is my config:

set system ntp boot-server xx.xx.xx.xx
set system ntp server xx.xx.xx.x1
set system ntp server xx.xx.xx.x2
set system ntp server xx.xx.xx.xx prefer
set system ntp source-address xx.xx.xx.yy

I have the right firewall filters set up as well. am i missing anything else??

Are you sure the device accessing to ntp server?

yes I checked that

Could you share us firewall filter at the lo0?  and  following command's output 

start shell

ps aux | grep ntp 

Could this be the problem?  I had to overcome this issue myself...

   Why does the Network Time Protocol (NTP) stop working if a loopback firewall filter is applied?

   http://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=KB11436

Regards,

Sam

I don't have a loopback firewall filter applied

Hello I have the same problem but in an EX 4300 switch, I see that you have attached a link with the solution but I have the doubt if it could be applied in an EX4300 switch
I would appreciate it if you can help me
regards

Can you please check following URL?

https://kb.juniper.net/InfoCenter/index?page=content&id=KB30884&cat=EX_SERIES&actp=LIST

Hello,

1/

---

rami.ismaeil@gmail.com wrote:

I can't get NTP to sync on Juniper MX480. I am getting the following messages:

 

ntpq: Can't find host localhost
 

---

This happens because Your name-server cannot resolve "localhost". This is easily fixed by :

set system static-host-mapping localhost inet 127.0.0.1

2/ The NTP servers must be reachable via global routing table (a.k.a. inet.0). If they are reachable via VRF but not via inet.0, you have to provide two-way routing reachability between inet.0 and that VRF on Your MX480.

3/

---

rami.ismaeil@gmail.com wrote:

 

I have the right firewall filters set up as well. 

 

---

Are You sure about that? Could You please post the following printouts:

set date ntp xx.xx.xx.xx
set date ntp xx.xx.xx.x1
set date ntp xx.xx.xx.x2

HTH

Thanks

Alex

Hi, 
In my case i have an NTP reachable (ping), from an OPM-VRF but not from inet.0.

when I tryied the "set systemntp source-address 10.146.11.83" (with 10.146.11.83, the IP in OPM-VRF) it still don't work.

So please, is it possible and how, to have an NTP from a VRF diffenrent from inet.0 working.

Thanks.

Hi,

NTP (client) in a VRF might by supported from JUNOS 11.2 onwards http://pathfinder.juniper.net/feature-explorer/feature-info.html?fKey=2476&fn=NTP+support+for+IPv4+VRF /  http://www.juniper.net/techpubs/en_US/junos11.2/information-products/topic-collections/release-notes/11.2/topic-57399.html#jd0e2787 but I have to admit I´m not sure if "This enables an NTP server running on a provider edge (PE) router to respond to NTP requests from a customer edge (CE) router. As a result, a PE router can process any NTP request packet coming from different routing instances." really covers this. But I´m sure somebody else knows for sure ...

Afai remember you can still "fix" this with some route-leaking from/to VRF to inet.0 ...

Best Regards

Ulf