For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

juniorb2000's avatar
juniorb2000
Icon for Nimbostratus rankNimbostratus
Jun 22, 2016

NTP Configuration and Route Domains

Hi,

 

On a BIG-IP 4000S (running 11.5.3), is it possible to configure NTP servers that are only accessible through a non-0 route domain? Our NTP servers are not accessible through the MGMT interface so we have to access them inband. We currently have a dedicated Management Partition with a default Route Domain of 100, which we want to us for this purpose. All routing is present and correct, but I do not see any NTP requests exiting the relevant interface in RD 100. I have tried configuring the NTP servers while in the Management Partition and also using the syntax 1.1.1.1%100 when specifying the servers, but to no avail.

 

We intended to use the Management Partition / Route Domain for SNMP also so the same question applies to that.

 

Thanks in advance,

 

J

 

application delivery
BIG-IP
LTM

1 Reply

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Jun 22, 2016

    A proper route on the non-0 RD should suffice in terms of access to the NTP servers from the non-0 RD. You can create a specific route to the NTP servers with reject option in the 0-RD to prevent it from accessing the NTP servers, if required.