1-10To do… Use the command… RemarksEnter VLAN interface view interface Vlan-interface vlan-id —Configure the switch to work in theNTP multicast server modentp-service multicast-server [ ip-address ][ authentication-keyid keyid | ttl ttl-number| version number ]*RequiredNot configured by default.Configuring a switch to work in the multicast client modeFollow these steps to configure a switch to work in the NTP multicast client mode:To do… Use the command… RemarksEnter system view system-view —Enter VLAN interface view interface Vlan-interface vlan-id —Configure the switch to work in theNTP multicast client modentp-service multicast-client[ ip-address ]RequiredNot configured by default.Configuring Access Control RightWith the following command, you can configure the NTP service access-control right to the local switchfor a peer device. There are four access-control rights, as follows:z query: Control query right. This level of right permits the peer device to perform control query to theNTP service on the local device but does not permit the peer device to synchronize its clock to thelocal device. The so-called “control query” refers to query of state of the NTP service, includingalarm information, authentication status, clock source information, and so on.z synchronization: Synchronization right. This level of right permits the peer device to synchronizeits clock to the local switch but does not permit the peer device to perform control query.z server: Server right. This level of right permits the peer device to perform synchronization andcontrol query to the local switch but does not permit the local switch to synchronize its clock to thepeer device.z peer: Peer access. This level of right permits the peer device to perform synchronization andcontrol query to the local switch and also permits the local switch to synchronize its clock to thepeer device.NTP service access-control rights from the highest to the lowest are peer, server, synchronization,and query. When a device receives an NTP request, it will perform an access-control right match in thisorder and use the first matched right.Configuration PrerequisitesPrior to configuring the NTP service access-control right to the local switch for peer devices, you needto create and configure an ACL associated with the access-control right. For the configuration of ACL,refer to ACL Configuration in Security Volume.Configuration ProcedureFollow these steps to configure the NTP service access-control right to the local device for peerdevices:
