Configuring Access-Control Rights - H3C S7500E Series Operation Manual

Operation Manual – NTP
H3C S7500E Series Ethernet Switches

1.5 Configuring Access-Control Rights

With the following command, you can configure the NTP service access-control right to
the local device. There are four access-control rights, as follows:
query: control query permitted. This level of right permits the peer device to
perform control query to the NTP service on the local Switch But does not permit
the peer device to synchronize its clock to the local device. The so-called "control
query" refers to query of some states of the NTP service, including alarm
information, authentication status, clock source information, and so on.
synchronization: server access only. This level of right permits the peer device to
synchronize its clock to the local Switch But does not permit the peer device to
perform control query.
server: server access and query permitted. This level of right permits the peer
device to perform synchronization and control query to the local Switch But does
not permit the local device to synchronize its clock to the peer device.
peer: full access. This level of right permits the peer device to perform
synchronization and control query to the local Switch And also permits the local
device to synchronize its clock to the peer device.
From the highest NTP service access-control right to the lowest one are peer, server,
synchronization, and query. When a device receives an NTP request, it will perform
an access-control right match and will use the first matched right.
1.5.1 Configuration Prerequisites
Prior to configuring the NTP service access-control right to the local device, you need to
create and configure an ACL associated with the access-control right. For the
configuration of ACL, refer to ACL Configuration.
1.5.2 Configuration Procedure
Follow these steps to configure the NTP service access-control right to the local device:
Enter system view
Configure the NTP
service access-control
right to the local device
To do...
system-view
ntp-service access { peer | query |
server | synchronization }
acl-number
Use the command...
1-15
Chapter 1 NTP Configuration
Remarks
—
Required
peer by default