HP 6125G HP 6125G & 6125G/XG Blade Switches Network Management and Mon - Page 26

Configuring the DSCP value for NTP messages, Configuring access-control rights

Get HP 6125G PDF manuals and user guides View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals

Page 26 highlights

• Symmetric active/passive mode-After you specify a symmetric-passive peer on a symmetric active peer, static associations are created on the symmetric-active peer, and dynamic associations are created on the symmetric-passive peer. • Broadcast or multicast mode-Static associations are created on the server, and dynamic associations are created on the client. A single device can have a maximum of 128 concurrent associations, including static associations and dynamic associations. To configure the allowed maximum number of dynamic sessions: Step 1. Enter system view. 2. Configure the maximum number of dynamic sessions allowed to be established locally. Command system-view Remarks N/A ntp-service max-dynamic-sessions number The default is 100. Configuring the DSCP value for NTP messages Step 1. Enter system view. 2. Configure the Differentiated Service Code Point (DSCP) value for NTP messages. Command system-view ntp-service dscp dscp-value Remarks N/A The default setting is 16. Configuring access-control rights From the highest to lowest, the NTP service access-control rights are peer, server, synchronization, and query. If a device receives an NTP request, it performs an access-control right match and uses the first matched right. If no matched right is found, the device drops the NTP request. • Query-Control query permitted. This level of right permits the peer devices to perform control query to the NTP service on the local device, but it does not permit a peer device to synchronize to the local device. "Control query" refers to the query of some states of the NTP service, including alarm information, authentication status, and clock source information. • Synchronization-Server access only. This level of right permits a peer device to synchronize to the local device, but it does not permit the peer devices to perform control query. • Server-Server access and query permitted. This level of right permits the peer devices to perform synchronization and control query to the local device, but it does not permit the local device to synchronize to a peer device. • Peer-Full access. This level of right permits the peer devices to perform synchronization and control query to the local device, and it permits the local device to synchronize to a peer device. The access-control right mechanism provides only a minimum level of security protection for a system running NTP. A more secure method is identity authentication. 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
19
•
Symmetric active/passive mode
—After you specify a symmetric-passive peer on a symmetric active
peer, static associations are created on the symmetric-active peer, and dynamic associations are
created on the symmetric-passive peer.
•
Broadcast or multicast mode
—Static associations are created on the server, and dynamic
associations are created on the client.
A single device can have a maximum of 128 concurrent associations, including static associations and
dynamic associations.
To configure the allowed maximum number of dynamic sessions:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure the maximum
number of dynamic sessions
allowed to be established
locally.
ntp-service max-dynamic-sessions
number
The default is 100.
Configuring the DSCP value for NTP messages
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure the Differentiated
Service Code Point (DSCP)
value for NTP messages.
ntp-service dscp
dscp-value
The default setting is 16.
Configuring access-control rights
From the highest to lowest, the NTP service access-control rights are
peer
,
server
,
synchronization
, and
query
. If a device receives an NTP request, it performs an access-control right match and uses the first
matched right. If no matched right is found, the device drops the NTP request.
•
Query
—Control query permitted. This level of right permits the peer devices to perform control
query to the NTP service on the local device, but it does not permit a peer device to synchronize to
the local device. "Control query" refers to the query of some states of the NTP service, including
alarm information, authentication status, and clock source information.
•
Synchronization
—Server access only. This level of right permits a peer device to synchronize to the
local device, but it does not permit the peer devices to perform control query.
•
Server
—Server access and query permitted. This level of right permits the peer devices to perform
synchronization and control query to the local device, but it does not permit the local device to
synchronize to a peer device.
•
Peer
—Full access. This level of right permits the peer devices to perform synchronization and control
query to the local device, and it permits the local device to synchronize to a peer device.
The access-control right mechanism provides only a minimum level of security protection for a system
running NTP. A more secure method is identity authentication.