ntp-service in-interface disable

Function

The ntp-service in-interface disable command disables an interface from receiving NTP packets.

The undo ntp-service in-interface disable command enables an interface to receive NTP packets.

By default, an interface is enabled to receive NTP packets.

Format

ntp-service [ ipv6 ] in-interface disable

undo ntp-service [ ipv6 ] in-interface disable

Parameters

Parameter	Description	Value
ipv6	Indicates IPv6 NTP services.	-

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The undo ntp-service [ ipv6 ] in-interface disable command provides a method for access control.

You can disable the interface connected to external devices from receiving NTP packets in either of the following situations:

An unreliable clock server exists on the interface. By default, all the interfaces can receive NTP packets after NTP is enabled on the device. However, an unreliable clock source makes NTP clock data inaccurate.
The NTP clock data is modified when the interface is attacked maliciously.

Prerequisites

Before an interface is disabled from receiving IPv6 NTP packets, the IPv6 function must be enabled on the interface.

Example

# Disable VLANIF100 from receiving NTP packets.

<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] ntp-service in-interface disable

# Disable GigabitEthernet0/0/1 from receiving NTP packets.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo portswitch
[HUAWEI-GigabitEthernet0/0/1] ntp-service in-interface disable