Ntp-Service Access - H3C S5120-SI Series Command Reference Manual

ntp-service access

Syntax
ntp-service access { peer | query | server | synchronization } acl-number
undo ntp-service access { peer | query | server | synchronization }
View
System view
Default Level
2: System level
Parameters
peer: Specifies to permit full access. This level of right permits the peer devices to perform
synchronization and control query to the local device and also permits the local device to synchronize
its clock to that of a peer device. Control query refers to query of NTP status information, such as alarm
information, authentication status, and clock source information.
query: Specifies to permit control query. This level of right permits the peer devices to perform control
query to the NTP service on the local device but does not permit a peer device to synchronize its clock
to that of the local device.
server: Specifies to permit server access and query. This level of right permits the peer devices to
perform synchronization and control query to the local device but does not permit the local device to
synchronize its clock to that of a peer device.
synchronization: Specifies to permit server access only. This level of right permits a peer device to
synchronize its clock to that of the local device but does not permit the peer devices to perform control
query.
acl-number: Basic ACL number, in the range of 2000 to 2999
Description
Use the ntp-service access command to configure the access-control right for the peer devices to
access the NTP services of the local device.
Use the undo ntp-service access command to remove the configured NTP service access-control
right to the local device.
By default, the access-control right for the peer devices to access the NTP services of the local device is
set to peer.
From the highest NTP service access-control right to the lowest one are peer, server,
synchronization, and query. When a device receives an NTP request, it will match against the
access-control right in this order and will use the first matched right.
Note that:
The ntp-service access command provides only a minimum degree of security protection. A more
secure method is identity authentication. The related command is ntp-service authentication
enable.
Before specifying an ACL number in the ntp-service access command, make sure you have
already created and configured this ACL.
1-8