Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Login only on business hours

Hi,

Is there a way in order to enforce the authentication (telnet, shh) on switches and/or routers local or via RADIUS only on business hours?

Thank you.

Best regards.

Massimiliano.

5 REPLIES
New Member

Re: Login only on business hours

What RADIUS are you using?

You can edit the Profile, if using MS IAS and edit the option 'Allow access only on these days and at these times'

HTH

Steve

Re: Login only on business hours

Hi,

I'm using FreeRADIUS...

Thank you.

Best regards.

Massimiliano.

Re: Login only on business hours

Hi,

I've resolved.

In FreeRADIUS the attribute is "Login-Time"...

For examople in order to permit the login to one user only on interval range 8:00-24:00 on all days of the week we use Login-Time:='Al800-2400'

Best regards.

Massimiliano.

Re: Login only on business hours

In theory, you should be able to create an access list that's time based and then apply it to your line.

router(config)# time-range TEST

router(config-time-range)# periodic weekdays 08:00 to 17:00

router(config-time-range)# ip access-list ext ALLOWEDTELNET

router(config-ext-nacl)# permit tcp any any eq 23 time-range TEST

router(config-ext-nacl)# line vty 0 4

router(config-line)# access-class ALLOWEDTELNET

I've never tried this, but it should work.

HTH,

John

HTH, John *** Please rate all useful posts ***
New Member

Re: Login only on business hours

John,

A very useful post!

Thanks

Steve

243
Views
5
Helpful
5
Replies