H3C S3610-28P Operation Manual page 1195

Operation Manual – NTP
H3C S3610&S5510 Series Ethernet Switches
query: control query permitted. This level of right permits the peer device to
perform control query to the NTP service on the local device but does not permit
the peer device to synchronize its clock to the local device. The so-called "control
query" refers to query of some states of the NTP service, including alarm
information, authentication status, clock source information, and so on.
synchronization: server access only. This level of right permits the peer device to
synchronize its clock to the local device but does not permit the peer device to
perform control query.
server: server access and query permitted. This level of right permits the peer
device to perform synchronization and control query to the local device but does
not permit the local device to synchronize its clock to the peer device.
peer: full access. This level of right permits the peer device to perform
synchronization and control query to the local device and also permits the local
device to synchronize its clock to the peer device.
From the highest NTP service access-control right to the lowest one are peer, server,
synchronization, and query. When a device receives an NTP request, it will perform
an access-control right match and will use the first matched right.
1.5.1 Configuration Prerequisites
Prior to configuring the NTP service access-control right to the local device, you need to
create and configure an ACL associated with the access-control right. For the
configuration of ACL, refer to the ACL part of the manual.
1.5.2 Configuration Procedure
Follow these steps to configure the NTP service access-control right to the local device:
Enter system view
Configure the NTP
service access-control
right to the local device
Note:
The access-control right mechanism provides only a minimum degree of security
protection for the system running NTP. A more secure method is identity
authentication.
To do...
system-view
ntp-service access
{ peer | query | server |
synchronization }
acl-number
Use the command...
1-14
Chapter 1 NTP Configuration
Remarks
—
Required
peer by default