Configuring Access-Control Rights; Configuration Prerequisites; Configuration Procedure - HP 5500 EI Series Configuration Manual

Step
1. Enter system view.
2. Configure the Differentiated
Service Code Point (DSCP)
value for NTP messages.

Configuring access-control rights

From the highest to lowest, the NTP service access-control rights are peer, server, synchronization, and
query. If a device receives an NTP request, it performs an access-control right match and uses the first
matched right. If no matched right is found, the device drops the NTP request.
Query—Control query permitted. This level of right permits the peer devices to perform control
•
query to the NTP service on the local device, but it does not permit a peer device to synchronize to
the local device. "Control query" refers to the query of some states of the NTP service, including
alarm information, authentication status, and clock source information.
• Synchronization—Server access only. This level of right permits a peer device to synchronize to the
local device, but it does not permit the peer devices to perform control query.
Server—Server access and query permitted. This level of right permits the peer devices to perform
•
synchronization and control query to the local device, but it does not permit the local device to
synchronize to a peer device.
Peer—Full access. This level of right permits the peer devices to perform synchronization and control
•
query to the local device, and it permits the local device to synchronize to a peer device.
The access-control right mechanism provides only a minimum level of security protection for a system
running NTP. A more secure method is identity authentication.

Configuration prerequisites

Before you configure the NTP service access-control right to the local device, create and configure an
ACL associated with the access-control right. For more information about ACLs, see ACL and QoS
Configuration Guide.

Configuration procedure

To configure the NTP service access-control right to the local device:
Step
1. Enter system view.
Command
system-view
ntp-service dscp dscp-value
Command
system-view
21
Remarks
N/A
The default setting is 16.
Remarks
N/A