All nodes in a Cisco ACI fabric are raising NTP faults. The Date and Time policy is configured with the IP address of two NTP servers and both servers are reachable via the out-of-band management…

Adding NTP server IPs to an external management instance profile is not the missing step when the Date and Time policy already defines them and they are reachable.

A node management address policy defines how nodes obtain their management IP addresses, which is not directly related to enabling NTP traffic flow to external servers.

In Cisco ACI, communication between EPGs, including the out-of-band management EPG and external services like NTP, is governed by contracts. Even if the NTP servers are reachable and the out-of-band EPG is selected as the management EPG, an explicit out-of-band contract must be configured and applied to the out-of-band EPG to allow NTP traffic. This contract acts as a policy rule, enabling the necessary NTP communication to clear the faults.

Directly attaching NTP servers to the ACI fabric is unnecessary and bypasses the established out-of-band management network where the servers are already reachable.