cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
652
Views
0
Helpful
1
Replies

Can you set time of day access on 1242

sharon.shepherd
Level 1
Level 1

We are installing Cisco Aironet 1242's in our public libraries, we want to be able to set time of day access on the access point, is it possible? It is an open unsecured network, so there is no ACS server or access controller involved. We want to be able to set the time of day access based on the library's hours, on the access point itself if possible. Thanks.

1 Reply 1

Rob Huffman
Hall of Fame
Hall of Fame

Hi Sharon,

I can't think of any way of doing this, except maybe this method (which I have never tried);

Filters Using Time-Based ACLs

Time-based ACLs are ACLs that can be enabled or disabled for a specific period of time. This capability provides robustness and the flexibility to define access control policies that either permit or deny certain kinds of traffic.

This example illustrates how to configure a time-based ACL through the CLI, where Telnet connection is permitted from the inside to the outside network on weekdays during business hours:

Note: A time-based ACL can be defined either on the Fast Ethernet port or on the Radio port of the Aironet AP, based on your requirements. It is never applied on the Bridge Group Virtual Interface (BVI).

Log in to the AP through the CLI.

Use the console port or Telnet in order to access the ACL through the Ethernet interface or the wireless interface.

Enter global configuration mode on the AP CLI:

AP#configure terminal

Create a Time Range. To do this, issue this command in global configuration mode:

AP#time-range Test

!--- Create a time-range with name Test.

AP(config-time-range)# periodic weekdays 7:00 to 19:00

!--- Allows access to users during weekdays from 7:00 to 19:00 hrs.

Create an ACL 101:

AP# ip access-list extended 101

AP#permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range Test

!--- This ACL permits Telnet traffic to and from

!--- the network for the specified time-range Test.

This ACL permits a Telnet session to the AP on weekdays.

Issue this command in order to apply this time-based ACL to the Ethernet interface:

interface Ethernet0/0

ip address 10.1.1.1 255.255.255.0

ip access-group 101 in

!--- Apply the time-based ACL.

From this doc;

Access Point ACL Filter Configuration Example

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008058ed26.shtml

Hope this helps!

Rob

Review Cisco Networking for a $25 gift card