Ntp-Service Access - H3C MSR 20-20 Command Reference Manual

2304 C 152: NTP C
HAPTER

ntp-service access

Syntax
View
Parameter
Description
Example
C
ONFIGURATION OMMANDS
Table 607 Description on the fields of the display ntp-service trace command
Field
server
stratum
offset
synch distance
refid
ntp-service access { peer | query | server | synchronization } acl-number
undo ntp-service access { peer | query | server | synchronization }
System view
peer: Specifies to permit full access.
query: Specifies to permit control query.
server: Specifies to permit server access and query.
synchronization: Specifies to permit server access only.
acl-number: Basic ACL number, in the range of 2000 to 2999.
Use the
ntp-service access
access-control right to the local device.
Use the
undo ntp-service access
service access-control right to the local device.
By default, the local NTP service access-control right is set to peer.
From the highest NTP service access-control right to the lowest one are peer,
server, synchronization, and query. When a device receives an NTP request, it
will perform an access-control right match and will use the first matched right.
n
The ntp-service access command provides only a minimum degree of security
■
protection. A more secure method is identity authentication.
Before specifying an ACL number in the ntp-service access command, make
■
sure you have already created and configured this ACL.
# Configure devices on the subnet 10.10.0.0/16 to have the full access right to the
local device.
<Sysname> system-view
[Sysname] acl number 2001
Description
IP address of the NTP server
The stratum level of the corresponding system clock
The clock offset relative to the upper-level clock
The synchronization distance relative to the upper-level clock
Identifier of the primary reference source. When the stratum level of the
primary reference clock is 0, it is displayed as LOCL; otherwise, it is
displayed as the IP address of the primary reference clock.
command to configure the NTP service
command to remove the configured NTP