cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
435
Views
5
Helpful
5
Replies

Login only on business hours

Hi,

Is there a way in order to enforce the authentication (telnet, shh) on switches and/or routers local or via RADIUS only on business hours?

Thank you.

Best regards.

Massimiliano.

5 Replies 5

AxiomConsulting
Level 1
Level 1

What RADIUS are you using?

You can edit the Profile, if using MS IAS and edit the option 'Allow access only on these days and at these times'

HTH

Steve

Hi,

I'm using FreeRADIUS...

Thank you.

Best regards.

Massimiliano.

Hi,

I've resolved.

In FreeRADIUS the attribute is "Login-Time"...

For examople in order to permit the login to one user only on interval range 8:00-24:00 on all days of the week we use Login-Time:='Al800-2400'

Best regards.

Massimiliano.

John Blakley
VIP Alumni
VIP Alumni

In theory, you should be able to create an access list that's time based and then apply it to your line.

router(config)# time-range TEST

router(config-time-range)# periodic weekdays 08:00 to 17:00

router(config-time-range)# ip access-list ext ALLOWEDTELNET

router(config-ext-nacl)# permit tcp any any eq 23 time-range TEST

router(config-ext-nacl)# line vty 0 4

router(config-line)# access-class ALLOWEDTELNET

I've never tried this, but it should work.

HTH,

John

HTH, John *** Please rate all useful posts ***

John,

A very useful post!

Thanks

Steve

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: