configure ntp restrict-list

configure ntp restrict-list [add | delete] network {mask} [permit | deny] {{vr} vr_name}

Description

Restricts a host or block of client IP addresses from getting NTP service. When NTP is enabled over a VLAN (Virtual LAN), an NTP server is configured, or a broadcast NTP server is in a VLAN, the VLAN's IP block or NTP server's IP address is automatically added into the system with a permit action.

Syntax Description

add Restricts a client from getting NTP service.
delete Removes a client from the restrict list.
network Specifies a host or block of IP addresses.
mask Specifies the subnet mask of the network.
permit Specifies that a particular block of client IP addresses is permitted to get NTP service.
deny Specifies that a particular block of client IP addresses is denied NTP service.
vr Specifies VRs for NTP service.
vr_name Specifies the VR name for allowing/denying NTP service. If no VR name is specified, the current command context is used.

Default

All addresses are denied by default.

If no VR name is specified, the current command context is used.

Usage Guidelines

N/A.

Example

The following command restricts a block of client IP addresses from getting NTP service:

configure ntp restrict-list add 132.25.82.3 deny

History

This command was first available in ExtremeXOS 12.7.

The vr keyword was added in ExtremeXOS 22.2.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.