Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Junos] No output for "show NTP" after configuring NTP under routing-instance mgmt_junos

0

0

Article ID: KB35681 KB Last Updated: 12 May 2020Version: 2.0
Summary:
 

This article explains why the show NTP commands do not display anything after committing the NTP configuration under the management routing instance, whereas it does when it is configured on the default routing instance.

This is due to a feature limitation, and the article indicates what needs to be done to resolve the issue.

 

Symptoms:
 

Configuration Example

set system management-instance
set system ntp server 10.85.130.130 routing-instance mgmt_junos
set system ntp server 10.85.130.131 routing-instance mgmt_junos
set groups node0 interfaces fxp0 unit 0 family inet address 10.85.242.142/25   <-- fxp0 is the mgmt interface for SRX and routing devices, it is em0 for switching platforms.
set routing-options static route 0.0.0.0/0 next-hop 10.85.242.129
set routing-instances mgmt_junos routing-options static route 0.0.0.0/0 next-hop 10.85.242.129

In this example, the device can ping the NTP and DNS Server IP address. But DNS and NTP do not work.

{primary:node0}[edit]
root@jtac-lab# run show route table

mgmt_junos.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0          *[Static/5] 15:07:25
                    >  to 10.85.242.129 via fxp0.0
10.85.242.128/25   *[Direct/0] 15:07:26
                    >  via fxp0.0
10.85.242.142/32   *[Local/0] 15:07:26
                       Local via fxp0.0

{primary:node0}
root@jtac-lab> ping routing-instance mgmt_junos 10.85.130.130 rapid count 5
PING 10.85.130.130 (10.85.130.130): 56 data bytes
!!!!!
--- 10.85.130.130 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.398/2.657/11.248/4.296 ms

{primary:node0}
root@jtac-lab> ping routing-instance mgmt_junos 10.85.130.131 rapid count 5
PING 10.85.130.131 (10.85.130.131): 56 data bytes
!!!!!
--- 10.85.130.131 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.385/2.497/10.635/4.070 ms

{primary:node0}
root@jtac-lab> show ntp status no-resolve << There is no output here, which does not make sense.

{primary:node0}
root@jtac-lab> show ntp associations no-resolve  << There is no output here, which does not make sense.

{primary:node0}
root@jtac-lab> show system processes extensive | grep ntp
 2026 root           20    0 15432K  9952K select 0   0:03  0.00% ntpd

Note: Restarting ntpd-service too does not help.

 

Cause:
 

Juniper devices that run Junos OS release 18.1R1 have the configuration support to use the management VRF for NTP. See Management Interface in a Nondefault Instance and ntp for more details. 

However, there is a limitation for this feature. You need to make sure that at least one interface exists and is up in the default routing instance.

 

Solution:
 

Configure at least one interface and make sure it is up in the default routing instance to correct this problem.

Example

Configure lo0.0 with 127.0.0.1. Now you can see the NTP output correctly.

{primary:node0}[edit]
root@jtac-lab# show | compare
[edit interfaces lo0]
+    unit 0 {
+        family inet {
+            address 127.0.0.1/32;
+        }
+    }

{primary:node0}[edit]
root@jtac-lab# run show ntp associations no-resolve
   remote         refid           st t when poll reach   delay   offset  jitter
===============================================================================
*10.85.130.130    66.129.233.81    4 -   42   64    7    0.629   -0.336   0.248
+10.85.130.131    66.129.233.81    4 -   38   64    7    0.554    1.233   0.042

 

Modification History:

2020-05-12: Article modified to apply to all Junos and to describe issue with NTP configuration

 

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search