VPN up/down at scheduled times

Answered Question

Using a PIX525, Can a VPN be built which will automatically start up and shutdown the tunnel at scheduled times?


thanks..

Correct Answer by ggilbert about 9 years 11 months ago

If the VPN you are trying to build is like EzVPN or site to site VPN, then there is an option in the group-policy that you can configure "vpn-access-hours" -


In the case of EzVPN if the client is trying to establish a tunnel to the head end server, then you can specify the access-hours which will allow the tunnel to be established & torn-down at the configured time.


The rest of the time, the tunnel will try to get established but it will fail since the access-hours will not match.


All this will work only if the head end side is running version 7.x code.


Hope this sheds some light.


Rate this post, if it helps.


Cheers

Gilbert

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
b.speltz Thu, 05/24/2007 - 10:55
User Badges:
  • Bronze, 100 points or more

I don't think this is possible directly. Other way you can use an access list time feature and set it accordingly to allow the interesting traffic that can bring up the tunnel at a specific time.

Correct Answer
ggilbert Thu, 05/24/2007 - 18:37
User Badges:
  • Cisco Employee,

If the VPN you are trying to build is like EzVPN or site to site VPN, then there is an option in the group-policy that you can configure "vpn-access-hours" -


In the case of EzVPN if the client is trying to establish a tunnel to the head end server, then you can specify the access-hours which will allow the tunnel to be established & torn-down at the configured time.


The rest of the time, the tunnel will try to get established but it will fail since the access-hours will not match.


All this will work only if the head end side is running version 7.x code.


Hope this sheds some light.


Rate this post, if it helps.


Cheers

Gilbert

Actions

This Discussion