How to synchronize time on Mikrotik?

Question

Mikrotik

Good afternoon! There is a gateway (router mikrotik). I'm trying to raise a time server on it and distribute time within the network.
1. Configured the clock and timezone
2. Configured the ntp client (Enabled, Unicast, 89.109.251.21, 89.109.251.25), but the client status remains Started and does not change to Synchronized. I decided that the problem was in the Firewall: I allowed all incoming, outgoing, transits via the udp protocol on port 123 and placed them at the very top. In the Firewall, there is a picture: the Output counter works, but neither Input nor Forwards change the value (as there were zeros, they remain). Tried to change the addresses of ntp servers - to no avail.
What could be the problem???

Answer 1

What should you get back on upd/123? Allow input related/established.

Answer 2

And the specified ip-addresses are definitely NTP servers? Checked - the time is synchronized only with the second of them. Maybe they accept requests not from arbitrary ip-addresses? If this is something like the root NTP servers (more precisely, the Stratum 1 server), then it is undesirable to synchronize directly with them.
The Forward counter should not change, it only works for transit traffic.
In general, it is better to ensure synchronization not by ip-addresses, but by domain names, but since in Mikrotik, you cannot directly specify the domain name in the ntp client settings, then you can create a task in the scheduler that will periodically do this, for example, with the following command:

/system scheduler add interval=1d name=ntp-servers-refresh on-event="/system ntp client set primary-ntp=[:resolve time.windows.com] secondary-ntp=[:resolve ru.pool.ntp.org]" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-
date=nov/18/2019 start-time=02:15:35

Answer 3

common ntp server to help you!