Cisco Nexus 3000 series - Ntp Access-Group

Send comments to nexus3k-docfeedback@cisco.com
-SM-130
Cisco Nexus 3000 Series NX-OS System Management Command Reference
OL-29557-04
Chapter System Management Commands
ntp access-group
ntp access-group
To configure an access group to control Network Time Protocol (NTP) access, use the ntp access-group
command. To remove the NTP peer access group, use the no form of this command.
ntp access-group {peer | serve | serve-only | query-only} access-list-name
no ntp access-group {peer | serve | serve-only | query-only} access-list-name
Syntax Description
Defaults If you do not configure any access groups, NTP access is granted to all devices.
Command Modes Global configuration mode
Command History
Usage Guidelines The ntp access-group match-all command causes the access group options to be scanned in the
following order, from least restrictive to most restrictive: peer, serve, serve-only, query-only. If the
incoming packet does not match the peer access group, the packet goes to the serve access group to be
processed. If the packet does not match the serve access group, it goes to the next access group and so
on. This command also enables IPv6 access group processing.
This command does not require a license.
Examples This example shows how to configure a peer access group for NTP:
switch# configure terminal
switch(config)# ntp access-group peer Admin_Group_123
switch(config)#
This example shows how to remove an NTP peer access group:
switch# configure terminal
peer Allows the device to receive time requests and NTP control queries to synchronize
itself to the servers specified in the access list.
serve Allows the device to receive time requests and NTP control queries from the
servers specified in the access list but not to synchronize itself to the specified
servers.
serve-only Allows the device to receive only time requests from servers specified in the access
list.
query-only Allows the device to receive only NTP control queries from the servers specified
in the access list.
access-list-name Name of the NTP access group. The name can be any alphanumeric string up to 32
characters, including special characters.
Release Modification
6.0(2)U(2)1 This command was introduced.