Juniper SRX: Time / NTP / server unreachable / Troubleshooting

Die NTP Server auf einer Juniper SRX sind per PING erreichbar, die Zeit stimmt aber trotzdem nicht:

Aug 12 11:27:48 172.25.3.198 Aug 12 09:27:48 SRX2 xntpd: NTP Server Unreachable
Aug 12 11:27:46 172.25.3.198 Aug 12 09:27:46 SRX2 xntpd: NTP Server Unreachable
Aug 12 11:27:44 172.25.3.198 Aug 12 09:27:44 SRX2 xntpd: NTP Server Unreachable
Aug 12 11:27:42 172.25.3.198 Aug 12 09:27:42 SRX2 xntpd: NTP Server Unreachable

XXXX@SRX2> show ntp ?
Possible completions:
  associations         Show status of peers
  status               Show internal variables returned by peers
rkrakovic@SRX2> show ntp status
status=06f4 leap_none, sync_ntp, 15 events, event_peer/strat_chg,
version="ntpd 4.2.0-a Sat Jan 11 04:14:45 UTC 2014 (1)",
processor="octeon", system="JUNOS12.1X44-D30.4", leap=00, stratum=3,
precision=-17, rootdelay=25.375, rootdispersion=83.007, peer=31260,
refid=62.116.162.126,
reftime=d9758d8a.0f49d492  Wed, Aug 12 2015  9:16:58.059, poll=10,
clock=d9759084.8d7b5ea3  Wed, Aug 12 2015  9:29:40.552, state=4,
offset=-1.102, frequency=0.727, jitter=2.144, stability=0.070

Juniper Hilfe hier.

Zeige NTP Server:

XXX@SRX2# show system ntp
server 62.116.162.126 version 3;
server 109.235.58.115 version 3;
server 188.40.99.69 version 3;
server 46.4.54.78 version 3;

Logfile untersuchen:

XXX@SRX2> show log messages | match NTP
Mar 22 12:59:36  SRX2 init: ntp (PID 1433) started
Mar 22 14:13:05  SRX2 init: ntp (PID 1433) started
May  9 08:16:30  SRX2 init: ntp (PID 1434) started

Es werden jedoch keine aktiven Associations angezeigt

rkrakovic@SRX2> show ntp associations
..

NTP Server per PING erreichbar, aber per NTP nicht ?

Irrtum,. das Auflisten braucht einige Zeit…..

rkrakovic@SRX2> show ntp associations
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*62.116.162.126  40.33.41.76      2 -  982 1024  377    9.274    0.793   0.506
 109.235.58.115  .INIT.          16 -  74d 1024    0    0.000    0.000 4000.00
+188.40.99.69    217.91.28.79     3 -  979 1024  377   14.908    0.104   1.253
+46.4.54.78      36.224.68.195    2 -  132 1024  377   14.378    1.123   2.240

Die IP 109.235.58.115 hat ein Problem … wir nehmen Sie raus .. danach klappt es schneller ..

Nun stört nur noch die falsche Zeitzone

XXX@SRX2> configure
Entering configuration mode
[edit]
XXX@SRX2# set system time-zone Europe/Berlin

[edit]
XXX@SRX2# show | compare
[edit system]
+  time-zone Europe/Berlin;

[edit]
XXX@SRX2# commit and-quit
commit complete
Exiting configuration mode

XXX@SRX2> show system uptime 
Current time: 2015-08-12 13:08:18 CEST
System booted: 2015-05-09 10:13:36 CEST (13w4d 02:54 ago)
Protocols started: 2015-05-09 10:17:04 CEST (13w4d 02:51 ago)
Last configured: 2015-08-12 13:08:14 CEST (00:00:04 ago) by magadmin
1:08PM  up 95 days,  2:55, 2 users, load averages: 0.12, 0.11, 0.12