102
Related commands
ntp-service ipv6 source
ntp-service ipv6 unicast-server
ntp-service ipv6 unicast-peer
ntp-service source
ntp-service unicast-server
ntp-service unicast-peer
ntp-service acl
Use ntp-service acl to configure the right for peer devices to access the IPv4 NTP services on the
local device.
Use undo ntp-service to remove the configured IPv4 NTP service access right.
Syntax
ntp-service { peer | query | server | synchronization } acl ipv4-acl-number
undo ntp-service { peer | query | server | synchronization } [ acl ipv4-acl-number ]
Default
The right for the peer devices to access the IPv4 NTP services on the local device is peer.
Views
System view
Predefined user roles
network-admin
Parameters
peer: Allows time requests and NTP control queries (such as alarms, authentication status, and time
server information) from a peer device and allows the local device to synchronize itself to a peer
device.
query: Allows only NTP control queries from a peer device to the local device.
server: Allows time requests and NTP control queries from a peer device, but does not allow the
local device to synchronize itself to a peer device.
synchronization: Allows only time requests from a peer device.
acl ipv4-acl-number: Specifies an IPv4 ACL by its number. The peer devices that match the IPv4
ACL have the access right specified in the command. The ipv4-acl-number argument represents an
IPv4 basic ACL number in the range of 2000 to 2999 or an IPv4 advanced ACL number in the range
of 3000 to 3999.
Usage guidelines
When the device receives an IPv4 NTP request, it matches the request against the access rights in
the order from the least restrictive to the most restrictive: peer, server, synchronization, and
query.
• If no IPv4 NTP access control is configured, the peer access right applies.
• If the IP address of the peer device matches a permit statement in an IPv4 ACL, the access
right is granted to the peer device. If a deny statement or no IPv4 ACL is matched, no access
right is granted.
• If no IPv4 ACL is specified for an access right or the IPv4 ACL specified for the access right is
not created, the access right is not granted.