On 22/03/2014 16:10, Nick Hilliard wrote:
On 22/03/2014 15:31, Andrew Clark wrote:
Take a look at NTP access-groups. You can control access for each
aspect (server, peer, etc). Details here:
CSCuj66318: "15.2 ntp allows query with access-group configured"
Gee, it's a good job Cisco have a strong control-plane filtering feature
on all platforms, without any horrible caveats like conflating glean and
receive traffic, or matching outer MPLS label rather than inner IP
header in L3VPN setups, and without crazy maintenance overhead of
building an ACL with all local receive adjacencies in it!
Oh wait...
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
