Access Control Permission Configuration; Ntp Authentication Configuration; Prerequisites - H3C S7500 Series Operation Manual

Operation Manual – NTP
H3C S7500 Series Ethernet Switches
Note:
The total number of the servers and peers configured for a switch can be up to 128.
After the configuration, the S7500 series switch does not establish connections with
the peer if it operates in NTP server mode. Whereas if it operates in any of the other
modes, it establishes connections with the peer.
If an S7500 series switch operates as a passive peer in peer mode, NTP broadcast
client mode, or NTP multicast client mode, the connections it establishes with the
peers are dynamic. If it operates in other modes, the connections it establishes with
the peers are static.

1.3 Access Control Permission Configuration

Access control permission to NTP server is a security measure that is of the minimum
extent. Authentication is more reliable comparing to it.
An access request made to an NTP server is matched from the highest permission to
the lowest, that is, in the order of peer, server, synchronization, and query.
Follow these steps to configure the access control permission to the local NTP server:
Enter system view
Configure the access
control permission to the
local NTP server

1.4 NTP Authentication Configuration

For the networks with higher security requirements, you can specify to perform
authentications when enabling NTP. With the authentications performed on both the
client side and the server side, the client is synchronized only to the server that passes
the authentication. This improves network security.

1.4.1 Prerequisites

NTP authentication configuration involves:
Configuring NTP authentication on the client
Configuring NTP authentication on the server
Note the following when performing NTP authentication configuration:
To do...
system-view
ntp-service access
{ peer | server |
synchronization |
query } acl-number
Use the command...
1-8
Chapter 1 NTP Configuration
Remarks
—
Optional
By default, the access
control permission to the
local NTP server is peer