RouterOS 7.16.2 NTP Client

I’m adding RB5009U to hAP ax3 and CRS3xx fleet.

  • Bridge VLAN Filtering for multiple VLAN/subnets is working; no switching issues
  • IPv4/IPv6 routing and firewall are working; RouterOS package upgrades work.
  • hAP ax3 has WAN interface; all RB5009U ports are on default bridge.
  • All RB5009U interfaces are in WAN interface list; no WAN interface.
  • Both devices can ping *.pool.ntp.org hosts.
  • All IPv4 LAN subnets are private.

hAP ax3 NTP diagnostics:

[admin@mtc53uiga] > /system/ntp/client/export terse; /system/ntp/client/print without-paging
# 2025-01-16 10:06:59 by RouterOS 7.16.2
# software id = KQPZ-KUKS
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = xxxxxx
/system ntp client set enabled=yes
/system ntp client servers add address=0.pool.ntp.org
/system ntp client servers add address=1.pool.ntp.org
/system ntp client servers add address=2.pool.ntp.org
/system ntp client servers add address=3.pool.ntp.org
         enabled: yes
            mode: unicast
         servers: 0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.org,3.pool.ntp.org
             vrf: main
      freq-drift: 14.543 PPM
          status: synchronized
   synced-server: 3.pool.ntp.org
  synced-stratum: 2
   system-offset: -0.072 ms

[admin@mtc53uiga] > /tool ping count=4 address=0.pool.ntp.org
  SEQ HOST                                     SIZE TTL TIME       STATUS
    0 198.23.249.167                             56  55 52ms62us
    1 198.23.249.167                             56  55 52ms97us
    2 198.23.249.167                             56  55 50ms413us
    3 198.23.249.167                             56  55 51ms342us
    sent=4 received=4 packet-loss=0% min-rtt=50ms413us avg-rtt=51ms478us max-rtt=52ms97us

RB5009U NTP diagnostics:

[admin@mtrb5009a] /system/ntp/client> /system/ntp/client/export terse; /system/ntp/client/print without-paging
# 2025-01-16 10:04:12 by RouterOS 7.16.2
# software id = KWPA-GEH1
#
# model = RB5009UG+S+
# serial number = xxxxxx
/system ntp client set enabled=yes
/system ntp client servers add address=0.pool.ntp.org
/system ntp client servers add address=1.pool.ntp.org
/system ntp client servers add address=2.pool.ntp.org
/system ntp client servers add address=3.pool.ntp.org
     enabled: yes
        mode: unicast
     servers: 0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.org,3.pool.ntp.org
         vrf: main
  freq-drift: -0.368 PPM
      status: waiting

[admin@mtrb5009a] /system/ntp/client> /tool ping count=4 address=0.pool.ntp.org
  SEQ HOST                                     SIZE TTL TIME       STATUS
    0 162.159.200.123                            56  52 16ms944us
    1 162.159.200.123                            56  52 18ms26us
    2 162.159.200.123                            56  52 17ms98us
    3 162.159.200.123                            56  52 17ms63us
    sent=4 received=4 packet-loss=0% min-rtt=16ms944us avg-rtt=17ms282us max-rtt=1

RB5009U NTP client waits forever and system log topics clock,ntp are both silent.
Does NTP client require a public IPv4 address?

I observed similar issue but with time.google.com. I switched to other set of NTP servers for MikroTik devices and had no issues since. I also confirmed that while this is happening, I am able to query this NTP server from other devices with no issues.


Does NTP client require a public IPv4 address?

It does not.

Bah, humbug! Works when after adding default gateway IP address (hAP ax3 running NTP server). Good enough to move forward.
You know, I should disable the firewall since I just presumed it was not in play. Thanks for the reply, helps the mind work here.

Well, now I know disabling every firewall rule has no effect.