H3C S3100 Series Command Manual page 805

synchronization: Synchronization right. This level of right permits the peer device to synchronize its
clock to the local switch but does not permit the peer device to perform control query.
server: Server right. This level of right permits the peer device to perform synchronization and control
query to the local switch but does not permit the local switch to synchronize its clock to the peer device.
peer: Peer right. This level of right permits the peer device to perform synchronization and control query
to the local switch and also permits the local switch to synchronize its clock to the peer device.
acl-number: Basic access control list (ACL) number, in the range of 2000 to 2999.
Description
Use the ntp-service access command to set the access control right from the remote device to the
local NTP server.
Use the undo ntp-service access command to remove the configured access control right to the local
NTP server.
By default, the access control right from the remote device to the local NTP server is peer.
NTP service access-control rights from the highest to the lowest are peer, server, synchronization,
and query. When a local NTP server receives an NTP request, it will perform an access-control right
match and will use the first matched right.
The ntp-service access command only provides a minimal degree of security measure. A more secure
way is to perform identity authentication.
Refer to the ntp-service authentication enable command for related configuration.
Example
# Configure the access right from the remote device in ACL 2076 to the local NTP server as peer.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] ntp-service access peer 2076
# Configure the access right from the remote device in ACL 2028 to the local NTP server as server.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] ntp-service access server 2028
ntp-service authentication enable
Syntax
ntp-service authentication enable
undo ntp-service authentication enable
View
System view
Parameter
None
Description
Use the ntp-service authentication enable command to enable the NTP authentication.
Use the undo ntp-service authentication enable command to disable the NTP authentication.
By default, the NTP authentication is disabled.
1-5