Ntp-Service Authentication Enable - H3C SR6600 Command Reference Manual

Default
The access-control right for the peer devices to access the NTP services of the local device is set to peer.
Views
System view
Default command level
3: Manage level
Parameters
peer: Permits full access. This level of right permits the peer devices to perform synchronization and
control query to the local device and also permits the local device to synchronize its clock to that of a peer
device. Control query refers to query of NTP status information, such as alarm information, authentication
status, and clock source information.
query: Permits control query. This level of right permits the peer devices to perform control query to the
NTP service on the local device but does not permit a peer device to synchronize its clock to that of the
local device.
server: Permits server access and query. This level of right permits the peer devices to perform
synchronization and control query to the local device but does not permit the local device to synchronize
its clock to that of a peer device.
synchronization: Permits server access only. This level of right permits a peer device to synchronize its
clock to that of the local device but does not permit the peer devices to perform control query.
acl-number: Specifies a basic ACL number in the range of 2000 to 2999.
Usage guidelines
From the highest NTP service access-control right to the lowest one are peer, server, synchronization,
and query. When a device receives an NTP request, it matches against the access-control right in this
order and uses the first matched right. If no matched right is found, the device drops the NTP request.
The ntp-service access command provides only a minimum degree of security protection. A more secure
method is identity authentication. The related command is ntp-service authentication enable.
Before specifying an ACL number in the ntp-service access command, make sure you have created and
configured this ACL.
Examples
# Configure the peer devices on subnet 10.10.0.0/16 to have the full access right to the local device.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 10.10.0.0 0.0.255.255
[Sysname-acl-basic-2001] quit
[Sysname] ntp-service access peer 2001

ntp-service authentication enable

Use ntp-service authentication enable to enable NTP authentication.
Use undo ntp-service authentication enable to disable NTP authentication.
Syntax
ntp-service authentication enable
76