D-Link DGS-1510 Series - Network Time Protocol (NTP) Commands

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
434
51. Network Time Protocol (NTP) Commands
51-1 ntp access-group
This command is used to control the NTP services on the Switch. Use the no form of this command to
remove the access control to the NTP services.
ntp access-group {default | IP-ADDRESS [IP-MASK] | IPV6-ADDRESS | IPV6-ADDRESS
/PREFIX-LENGTH} [ignore] [nomodify] [noquery] [nopeer] [noserve] [notrust] [version]
no ntp access-group {default | IP-ADDRESS [IP-MASK] | IPV6-ADDRESS | IPV6-ADDRESS
/PREFIX-LENGTH}
Parameters
default
Specifies to use the default IPv4 (0.0.0.0/0.0.0.0) or IPv6 (::/::)
address. The default IP address is always included with the lowest
priority in the list.
IP-ADDRESS
Specifies a host or network IP address.
IP-MASK
(Optional) Specifies the mask of the IP address.
IPV6-ADDRESS
Specifies a host or network IPv6 address.
IPV6-ADDRESS /PREFIX-
LENGTH
(Optional) Specifies an IPv6 network.
ignore
(Optional) Specifies to deny all packets, including NTP control
queries.
nomodify
(Optional) Specifies to deny the NTP control queries that attempt to
modify the state of the server.
noquery
(Optional) Specifies to deny all NTP control queries.
nopeer
(Optional) Specifies to deny packets that might mobilize an
association unless authenticated. The packets include broadcast,
symmetric-active and manycast server packets when a configured
association does not exist. Note that this flag does not apply to
packets that do not attempt to mobilize an association.
noserve
(Optional) Specifies to deny all packets except NTP control queries.
notrust
(Optional) Specifies to deny packets that are not cryptographically
authenticated. If the ntp authenticate command is enabled,
authentication is required for all packets that might mobilize an
association. If the ntp authenticate command is disabled, but the
notrust flag is not present, an association can be mobilized no
matter it is authenticated or not. If If the ntp authenticate command
is disabled, but the notrust flag is present, authentication is required
only for the specified address/mask range.
version
(Optional) Specifies to deny packets that mismatch the current NTP
version.
Default
By default, full access is granted to all systems when the default parameter is used only.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline