Access Control Permission Configuration; Ntp Authentication Configuration - Huawei Quidway S5600 Series Operation Manual

Operation Manual – NTP
Quidway S5600 Series Ethernet Switches-Release 1510
IV. NTP multicast server mode
When an S5600 series switch operates in NTP multicast server mode, it multicasts a
clock synchronization packet periodically. The devices which are configured to be in
the NTP multicast client mode will response this packet and start the clock
synchronization procedure. In this mode, the switch can accommodate up to 1024
multicast clients.
Note:
The total number of the servers and peers configured for a switch can be up to
128.
After the configuration, the S5600 series switch does not establish connections
with the peer if it operates in NTP server mode. Whereas if it operates in any of the
other modes, it establishes connections with the peer.
If an S5600 series switch operates as a passive peer in peer mode, NTP
broadcast client mode, or NTP multicast client mode, the connections it
establishes with the peers are dynamic. If it operates in other modes, the
connections it establishes with the peers are static.

1.3 Access Control Permission Configuration

Access control permission to NTP server is a security measure that is of the minimum
extent. Authentication is more reliable comparing to it.
An access request made to an NTP server is matched from the highest permission to
the lowest, that is, in the order of peer, server, synchronization, and query.
Table 1-3 Configure the access control permission to the local NTP server
Operation
Enter system view
Configure
access
permission to the
local NTP server

1.4 NTP Authentication Configuration

For the networks with higher security requirements, you can specify to perform
authentications when enabling NTP. With the authentications performed on both the
Command
system-view
the
ntp-service access { peer |
control
server | synchronization |
query } acl-number
Huawei Technologies Proprietary
1-9
Chapter 1 NTP Configuration
Description
—
Optional
By default, the access control
permission to the local NTP
server is peer