NTP access-group command

Gday All,
If I apply the configuration to my router
ntp access-group peer NTP_ACL
Will this mean that my router can still be quieried, from any source, for NTP and can only query the servers allowed in NTP_ACL?
If I apply the configuration to my router
ntp access-group serve NTP_ACL
Will this mean that my router can query any router for NTP updates and only restricted hosts can query my router for NTP updates?
Any feedback is greatly appreciated.

Thomas
You would think that this is the way that it would work. But my experience is that if you apply one of the ntp access group functions that it will apply both types of filtering - and the function that does not have any permits will not allow that access. So my advice is that if you will apply one ntp access group that you should apply both.
HTH
Rick

Similar Messages

  • NTP Access-group Problem

    Hi
    I have a setup like :
    The R-1 has an NTP server and NTP peer(R-2).
    On R-1 i did like: ntp sever <ntp-sever ip add>
                             ntp peer <R-2> Loopback0
                             ntp source loopback0
                             ntp update-calender
    Similarly i did on R-2,but when i add a ntp access-group peer <ACL_NO> on both the routers.
    Where ACL_N0 is permit host <R-2 Loopback0>
                               permit host <ntp server ip add>
    With this setup the routers should sync with each other in case one's link(Let R-1 to NTP Server ) to NTP server goes down.
    But the
    * master (synced) value remains unchanged even when the link (R-1 to NTP Server) is down

    NTP peers would sync with each other when the peer is on a better Datum level (worst is 16).So if both the switches are on same datum level they will consider themselves as master.
    Also use the command sh ntp status to look for the time since NTP updates came from a NTP server.
    HTH

  • Class-map type inspect match access-group name question

    I'm creating a zone base firewall solution and all appears to be fine until I create a class-map type inspect match-all or any
    and match access-group name acl to match an extended ACL and once I match it the commands runs but when I go back to view the configuration of the class-map it is not there. 
    I have tried other named ACLs and it works if the ACL contents are simple like permit ip any any but for complex ACLs with ranges, tcp, udp, icmp etc etc it does not take it but  it does not report an issue either and when I view the config its not there for the complex extended acl but for the simple extended acl it does show.
    Any restrictions or possible bugs I'm running into?
    Thanks for all looking

    This could be a bug.  Could you post the exact configuration you are trying to implement?  I just set up a small test and I have been unable to reproduce what you are seeing.  I would like to see if I get the same result using your config. 
    Please remember to select a correct answer and rate helpful posts

  • How do I access group calendars on 10.8 server from a calendar client?

    Hi,
    I have a brand new installation of 10.8.2 . I installed the server app and started Calendar, Contacts, DNS, File Sharing, Mail, Open Directory and the Wiki services. I created a group with some users in it. I also created a group wiki and enabled the calendar for that wiki. The user group has r/w access to the wiki. The web interface to the wiki works from a client 10.8.2 client system. I can edit the group calendar through the web interface. I created an account in the Calendar application that connects to the server and shows the users' calendar. I altered the server path to /principals/__uids__/wiki-GROUPNAME/.
    The calendar shown is still that for the user and not the one of the group. Hence my question: how do I access group calendars on a 10.8 server from the calendar application on a client?

    yrmomsadic wrote:
    Forgot to mention, you can techinically force it to work, but iCal breaks it for some unknow reason, taking it back to the users account after a day or two.  The best work around has been to create a new user, named the group name, and then allow delegates to access the calendar.  This however screws things up with the iphone calendar, as it didn't/doesn't handle delegates.  Again, hoping Apple comes to their senses on this.
    You can still delegated calendars on iOS, but the setup is a little tricky.  You have to add an entirely new calendar account, and enter the full ugly url with the users uuid.  It would be so nice if iOS just supported CalDav delegation.

  • How to access group policy in windows 8 home premium, not 8.1 to disable snipping tool

    how do I access group policy to disable the snipping tool in windows 8 home premium? client has not installed update 8.1. client is trying to save pictures to pictures album, but it also saves a screenshot to the documents folder as well regardless
    of what save method is used.
    thanks.

    You can disable the Snipping Tool by creating the below registry setting
    (save as a .REG file)
    Windows Registry Editor Version 5.00
    [HKEY_CURRENT_USER\Software\Policies\Microsoft\TabletPC]
    "DisableSnippingTool"=dword:00000001
    ref: http://gpsearch.azurewebsites.net/Default.aspx?PolicyID=2426
    I am not aware of any Snipping Tool feature which automatically saves the snip, as a file.
    (there are other utilities available which can perform similar functions)
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)
    This has apparently resolved the problem with the saving of screenshots based on the customers response. thanks so much.

  • Incorrect ouput of "groups" command

    I setup iDS 5.1 server on Solaris 9 and client on Solaris8. I created one account (user1) and add it on 2 groups, but I could not get right output by running "groups" command, it only was displayed that this account just exist on one group (primary group). Please help, thanks in advance.
    Here is the output on iDS client.
    # cat /etc/nsswitch.conf
    passwd: files ldap
    group: files ldap
    # su - user1
    $ id
    uid=10001(user1) gid=1699(GD699)
    $ groups
    GD699
    # ldaplist -l group GD499
    dn: cn=GD499,ou=group,dc=cig,dc=mcel,dc=mot,dc=com
    gidNumber: 1499
    objectClass: top
    objectClass: groupofuniquenames
    objectClass: posixgroup
    cn: GD499
    description: CoE group
    uniqueMember: uid=user1,ou=People, dc=cig,dc=mcel,dc=mot,dc=com
    uniqueMember: uid=user2,ou=People, dc=cig,dc=mcel,dc=mot,dc=com
    BTW, another thing strange really confused me, I also installed "ypldapd" (PADL/LDAP gateway )on Solaris 8 client, the output is right if I added "nis" on "group" line in /etc/nsswitch.conf.

    At first I tried to set LC_ALL to ru_RU.UTF-8, but the result of sorting was still wrong.
    The locale settings are in /usr/share/locale/, and /usr/share/locale/ruRU.UTF-8/LCCOLLATE is a symlink to a latin collation, which does not work for cyrllic characters, of course. You can consider this as bug, I guess.
    /usr/share/locale/UTF-8/ does not have LC_COLLATE, so it is equivalent to LC_COLLATE=C, which means sorting strings by considering each string as an array of unsigned bytes, or sorting according to the Unicode code points. This usually gives the correct collation. export LC_ALL=C should have worked as well.
    Setting LC_ALL (or LC_TIME) to ru_RU.UTF-8 has an effect that the date is output in Russian. for example:
    $ export LCALL=ruRU.UTF-8
    $ date
    среда, 17 марта 2010 г. 02:45:07 (JST)
    $ ls -ld /
    drwxrwxr-t 31 root admin 1122 14 ноя 22:24 /
    If you want to keep this behavior, then set only LC_COLLATE to C
    $ export LCALL=ruRU.UTF-8
    $ export LC_COLLATE=C
    or create an alias like
    alias sort='LC_COLLATE=C sort'

  • Mail 4 Exchange should allow Access Groups

    It's a shame the Mail for Exchange Connection menu requires an Access Point setting - and doesn't allow the selection of an Access Group.
    I have an Access Group set-up where my WLAN is used, but when I leave the office, the 2nd preference is a 3G/UMTS data connection.
    I should be able to sync with my Exchange server in the office, and when I leave, maintain the connection without any user intervention required (by auto-switching to UMTS)
    It would seem so simple, but unfortunately it's not supported. Hopefully someone from Nokia is watching....

    Don't know what kind of phone but I assume an E series. Try downloading Smart Roaming (go to "Catalog" on the phone). THen configure smart roaming to be your wifi and then gprs. Then configure mail 4 exchange to use smart roaming as its access point. Works well.

  • Limited access group for some switches only

    Hi ,
    We have around 80 x cisco 3750 switches using AAA Windows Radius server and AD as authentication for IT users login.
    How do we setup a limited access group which allow them to access some switches ONLY?
    Any advice is very much appreciated.
    Thanks
    Qle

    Well its Prod (you have a dashboard called testdashboard in Prod?) anyway - someone might have changed the presentation catalogue permissions on the dashboard. All it takes is for someone to remove 'Everyone' or change a Group permission and it could effect.
    If they changed the Parent folder and cascaded the changes down this might cause this issue.
    You have a folder called 'Shared' - check the groups that the people are in have 'Traverse' , 'Read' or higher. Also chek dashboard permissions themselves from Settings-Manage Interactive Dashboards - Check the Padlock icon.
    Are you users getting allocated into the correct WEBGROUPS ? Is this assisngment done explicitly in the webcat or via an RPD Variable ? Have you checked NQQueryl.log to make sure any init blocks are completing successfully?
    Either persmissions have changed or group memebership is not completing.
    Good luck
    Alastair

  • Dynamically accessing / changing command in subreport

    We have reports with multiple sub reports. I need to access and change the sub reports command at run time. The code below does not work, it throws the exception "Not supported within subreports."
    CrystalDecisions.ReportAppServer.DataDefModel.ISCRTable Tbl;
    CrystalDecisions.ReportAppServer.DataDefModel.CommandTable cmdTbl;
    string rptCommand;
    for (int j=0 ; j<crReportDocument.Subreports.Count; j++){
    ReportDocument subReportDocument = crReportDocument.Subreports[j]; //crReportDocument holds the main report
    Tbl = subReportDocument.ReportClientDocument.DatabaseController.Database.Tables<i>; //No Database Controller in subreports - exception!
    cmdTbl = Tbl.Clone(true) as CrystalDecisions.ReportAppServer.DataDefModel.CommandTable;
    rptCommand = cmdTbl.CommandText.ToString();
    How to access the command of the subreports?
    Thanks

    to do this, you will need to use a subreportclientdocument object retrieved from the main report (crReportDocument.ReportClientDocument):
    ISCDReportClientDocument rcd = crReportDocument.ReportClientDocument;
    SubReportClientDocument subRCD = rcd.SubReportController.GetSubreport("mySub");
    // get the command table,
    // clone it,
    // change the commandText
    subRCD.DatabaseController.SetTableLocation(oldTbl, newTbl);
    Dan
    from there, you will have access to all controllers for the subreportclientdocument except the printoutputcontroller.

  • Sharing group command

    Is it possible to share group commands?
    I'm sure somebody, somewhere mapped all EXS24.

    Here is my layout for an Evolution UC-33 plus a Roland FC-300:
    Uploaded with ImageShack.us
    How to set LFO1 Rate:
    Uploaded with ImageShack.us
    How to set CutOff:
    Uploaded with ImageShack.us
    All quite simple.

  • Group command

    How would I find the groups for 4 users? I can type in the 'group' commandfor myself but want to build a script that will give me each persons name and all the groups they are in.
    I am on a Solaris 7 os.

    I'm not sure if I have your question right, but the "groups" command takes a list of users as the argument list. Example:
    $ groups bin sys adm
    bin : bin sys
    sys : sys
    adm : adm sys tty lp
    That shows the group memberships of a number of default users.
    Alan
    Sun Developer Technical Support
    http://www.sun.com/developers/support

  • Can't access Group Tabs, unresponsive script 6955 loop.

    Tried to access group tabs and Firefox froze up along with everything else. Had to close Firefox using task manager via. Control/Alt/Delete. Once Firefox closed the rest of the computer worked. Now when opening Firefox I get "unresponsive script 6991". I press continue and I get "unresponsive script 6995" in a never ending loop. If I stop the script Firefox works, but I can't access Group Tabs. Also, in the middle of all of this Firefox updated to Ver. 28 from 27 something. I have rebooted my computer several times and searched the support topics but have not seen anything like this problem. The only thing I have come across to do that might help is reset Firefox. Wanted more info before I did.

    You can check for problems with the sessionstore.js and sessionstore.bak files in the Firefox profile folder that store session data.
    Rename (or delete) the sessionstore.js file and possible sessionstore-##.js files with a number and sessionstore.bak in the Firefox profile folder.
    *Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)
    *http://kb.mozillazine.org/Profile_folder_-_Firefox
    *http://kb.mozillazine.org/Multiple_profile_files_created
    Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost and you will have to recreate them (make a note or bookmark them if possible).

  • Why can't I access the command line I just downloaded for xcode?

    Why I can't access the command line I just downloaded for xcode?

    Firefox will not appear in the Market for most phones with incompatible hardware. I believe the Motorola Bravo is supported. You can check if your phone is supported here:
    https://wiki.mozilla.org/Mobile/Platforms/Android
    On some supported devices, a bug prevents Firefox from appearing in the Market. This may be related to the recent Market update. You can go to Settings/Applications and uninstall the Market update, then find and install Firefox.
    Or, you can download the app directly from here:
    http://ftp.mozilla.org/pub/mozilla.org/mobile/releases/4.0b3/android-r7/multi/
    (Note: To download the app directly for an AT&T phone, you will have to search for instructions on how to "sideload" the APK file, since AT&T disables the option to install from non-Market sources.)

  • Can not delete the ip igmp join-group command on NX2Ks.

    Hi,
    I have 1 NX5K & 1 NX2K (FEX) and configured PIM on them -Release 5.2(1)N1(1).
    I configured on the NX2K's ports the ip igmp join-group command to statically bind a multicast group to an interface. The multicast PIM works fine but when I try to remove the ip igmp join-group command on any interface because not all should have this command, I cannot.
    I have not found any  bug on the 5.2(1)N1(1) version related to this behavior and the released notes not mentioned anything about this.
    Any ideas...!?
    -Sergio

    Hello Sergio
    FEX ports are meant to be L2 ports only and hence you should not be allowed to configure "ip igmp join-group" but looks like we do allow it which is a bug.. I will see if there is one filed for it and if not file a new one.
    Thanks
    -Prashanth

  • How to use the access groups with the E61

    I have configured a access group in the E61 to connect to the internet. But how do I tell the E61 to use this access-group instead of a access-point???

    Access Point groups seems to be Supported only in IMAP/POP Email where you can select those to be used as an AP.
    In Browser you can use those if you select Browser Access Point to "Always ask" mode -> They you can select the Group to be used as an AP.

Maybe you are looking for