Configuring Access Control Right; Configuration Prerequisites; Configuration Procedure - H3C S5600 Series Operation Manual

To do...
Enter VLAN interface view
Configure the switch to work in the
NTP multicast server mode
Configuring a switch to work in the multicast client mode
Follow these steps to configure a switch to work in the NTP multicast client mode:
To do...
Enter system view
Enter VLAN interface view
Configure the switch to work in the
NTP multicast client mode

Configuring Access Control Right

With the following command, you can configure the NTP service access-control right to the local switch
for a peer device. There are four access-control rights, as follows:
query: Control query right. This level of right permits the peer device to perform control query to the
NTP service on the local device but does not permit the peer device to synchronize its clock to the
local device. The so-called "control query" refers to query of state of the NTP service, including
alarm information, authentication status, clock source information, and so on.
synchronization: Synchronization right. This level of right permits the peer device to synchronize
its clock to the local switch but does not permit the peer device to perform control query.
server: Server right. This level of right permits the peer device to perform synchronization and
control query to the local switch but does not permit the local switch to synchronize its clock to the
peer device.
peer: Peer access. This level of right permits the peer device to perform synchronization and
control query to the local switch and also permits the local switch to synchronize its clock to the
peer device.
NTP service access-control rights from the highest to the lowest are peer, server, synchronization,
and query. When a device receives an NTP request, it will perform an access-control right match in this
order and use the first matched right.

Configuration Prerequisites

Prior to configuring the NTP service access-control right to the local switch for peer devices, you need
to create and configure an ACL associated with the access-control right. For the configuration of ACL,
refer to ACL Configuration in Security Volume.

Configuration Procedure

Follow these steps to configure the NTP service access-control right to the local device for peer
devices:
Use the command...
interface Vlan-interface vlan-id
ntp-service multicast-server [ ip-address ]
[ authentication-keyid keyid | ttl ttl-number
| version number ]*
Use the command...
system-view
interface Vlan-interface vlan-id
ntp-service multicast-client
[ ip-address ]
1-10
Remarks
—
Required
Not configured by default.
Remarks
—
—
Required
Not configured by default.