Configuring Time-Based Services

This chapter describes time range profiles and the procedure for configuring time-based services. It includes the following topics:

Time Range Profiles

Configuring a Time Range Profile

Applying a Time Range Profile to a WLAN SSID

Applying a Time Range Profile to a Role

Verifying the Configuration

Time Range Profiles

Starting from Instant 6.4.3.4-4.2.1.0, Instant APs allow you to enable or disable an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. for users at a particular time of the day. You can now create a time range profile and assign it to a WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., so that user access to the Internet or network is restricted during a specific time period.

Instant APs support the configuration of both absolute and periodic time range profiles. You can configure an absolute time range profile to execute during a specific timeframe or create a periodic profile to execute at regular intervals based on the periodicity specified in the configuration.

The following configuration conditions apply to the time-based services:

Time-based services require an active NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server connection. Instant APs use the default NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server for time synchronization. However, the administrators can also configure an NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server on the Instant AP. To verify the time synchronization between the NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server and the Instant AP, execute the show time-range command and check if the time on the NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server is in synchronization with the local time. For more information on NTPNetwork Time Protocol. NTP is a protocol for synchronizing the clocks of computers over a network. server configuration, see NTP Server.

For a time range profile configured to enable an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. on the Instant AP:

When the timer starts, if the current time is greater than the start time and lesser than the end time, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. will be broadcast in the list of available networks by the AP. If an ACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port. rule is linked to the time profile, it is re-programmed and the rule which is time-based is applied. All the user sessions having this role assigned will be deleted.

When the timer ends, if the current time is greater than the end time, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is disabled. If the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is already disabled, then there is no effect on the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network..

If the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile itself is disabled using the following configuration, then it will remain disabled and not be broadcast according to time range profile configuration.

(Instant AP)(SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. Profile "<profile_name>")# wlanWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. ssid-profile <profile_name>

(Instant AP)(SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. Profile "<profile_name>")# disable

(Instant AP)(SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. Profile "<profile_name>")# time-range <profile_name> enable

 

In the above example, the time-range configuration will be accepted, but there will be no impact on the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. and will continue to remain disabled.

For a time range profile configured to disable an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. on the Instant AP:

When the timer starts, if the current time is greater than the start time and lesser than the end time, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. will not be broadcast by the AP in the list of available networks. If an ACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port. rule is linked to the time profile, it is re-programmed and the rule which is time-based is not applied. All the user sessions having this role assigned will be deleted.

When the timer ends, if the current time is greater than the end time, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is broadcast by the AP. If the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is already enabled, then there is no effect on the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network..

The enable and disable time-range profiles cannot be applied to an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile at the same time.

If an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. has two time range profiles configured with an overlapping duration, the overlapping time range is rejected by the AP.

Configuring a Time Range Profile

You can create time range profiles using the WebUI or the CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

In the Old WebUI

To create a time range profile:

1. Navigate to System > Show advanced options > Time Based Services.

2. Click New under Time Range Profiles. The New profile window for creating time range profiles is displayed.

3. Configure the parameters listed in the following table:

Table 1: Time Range Profile Configuration Parameters

Parameter

Description

Name

Specify a name for the time range profile.

Type

Select the type of time range profile.

Periodic—When configured, the state of the Instant AP changes based on the time range configured in the profile.

Absolute—When configured, the state of the Instant AP changes during a specific date, day, and time.

Period type

For periodic time range profiles, specify a periodic interval (day, weekday, weekend, or daily) at which the time range profile must be applied.

Start Day and End Day

For absolute time range profiles, specify the start day and the end day to configure a specific time period during which the time range profile is applied.

NOTE: Ensure that the year selected for Start Day and End Day cannot exceed 2037.

Start Time

Select the start time for the time range profile in the hh:mm format.

End Time

Select the end time for the time range profile in hh:mm format.

4. Click OK.

5. Click OK in the System window.

In the New WebUI

To create a time range profile:

1. Navigate to Configuration > System page.

2. Click Show advanced options at the bottom of the window.

3. Expand Time Based Services.

4. Click + under Time Range Profiles.

5. Configure the parameters listed in the following table:

Table 2: Time Range Profile Configuration Parameters

Parameter

Description

Name

Specify a name for the time range profile.

Type

Select the type of time range profile.

Periodic—When configured, the state of the Instant AP changes based on the time range configured in the profile. Specify a periodic interval (day, weekday, weekend, or daily) at which the time range profile must be applied.

Absolute—When configured, the state of the Instant AP changes during a specific date, day, and time.

Start Day and End Day

For absolute time range profiles, specify the start day and the end day to configure a specific time period during which the time range profile is applied.

NOTE: Ensure that the year selected for Start Day and End Day cannot exceed 2037.

Start Time

Select the start time for the time range profile in the hh:mm format.

End Time

Select the end time for the time range profile in hh:mm format.

6. Click OK.

7. Click Save.

In the CLI:

To create an absolute time range profile:

(Instant AP)(config)# time-range <name> absolute start <startday> <starttime> end <endday> <endtime>

To configure a periodic time range profile:

(Instant AP)(config)# time-range <name> periodic {<startday>|daily|weekday|weekend} <starttime> to <endtime>

Applying a Time Range Profile to a WLAN SSID

You can apply a time range profile to a WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. using the WebUI.

In the Old WebUI

Applying a time range profile:

1. Navigate to the WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile configuration wizard.

a. Click Networks > New or

b. Select an existing WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. and click edit.

2. Click Show advanced options.

3. In the Time Range section, click the Edit link, select a time range profile from the list, then select a value from the Status drop-down list, and then click OK.

When a time range profile is enabled on an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is made available to the users for the configured time range. For example, if the specified time range is 12:00–13:00, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. becomes available only between 12 PM and 1 PM on a given day.

If a time range is disabled, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. becomes unavailable for the configured time range. For example, if the configured time range is 14:00–17:00, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is made unavailable from 2 PM to 5 PM on a given day.

4. Click Next in the WLAN Settings, VLAN, and Security tabs and then click Finish in the Access tab.

In the New WebUI

Applying a time range profile:

1. Navigate to the WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile configuration wizard.

a. Go to Configuration > Networks.

b. Click + to add a new profile or select an existing WLANWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile and click Edit.

2. Click Show advanced options at the bottom of the page.

3. In the Time Range section, click Edit for Time Range Profiles, select a time range profile from the list, then select a value from the Status drop-down list, and then click OK.

When a time range profile is enabled on an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is made available to the users for the configured time range. For example, if the specified time range is 12:00–13:00, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. becomes available only between 12 PM and 1 PM on a given day.

If a time range is disabled, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. becomes unavailable for the configured time range. For example, if the configured time range is 14:00–17:00, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. is made unavailable from 2 PM to 5 PM on a given day.

4. Click Next until Finish.

In the CLI

To enable an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. during a specific time-range:

(Instant AP)(config)# wlan ssid-profile <profile_name>

(Instant AP)(SSID Profile "<name>")# time-range <profile_name> enable

To disable an SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. during a specific time-range:

(Instant AP)(config)# wlan ssid-profile <profile_name>

(Instant AP)(SSID Profile "<name>")# time-range <profile_name> disable

Verifying the Configuration

To view the time range profiles created on an Instant AP:

(Instant AP) # show time-range

To view the list of time range profiles configured on an Instant AP:

(Instant AP)# show time-profile

Applying a Time Range Profile to a Role

You can apply a time range profile to a rule using the WebUI.

In the Old WebUI

Applying a time range profile:

1. Navigate to Security > Roles.

a. Click Roles > New and create a new role or

b. Select an existing role under Roles and click Access Rules for <Role> > New.

2. Select Time Range and select a time range from the drop-down list.

3. Click OK.

When a time range profile is enabled on a role, the role is made available to the users for the configured time range. For example, if the specified time range is 12:00–13:00, the role becomes available only between 12 PM and 1 PM on a given day.

If a time range is disabled, the role becomes unavailable for the configured time range. For example, if the configured time range is 14:00–17:00, the role is made unavailable from 2 PM to 5 PM on a given day.

In the New WebUI

Applying a time range profile:

1. Navigate to Configuration > Security > Roles.

a. Click Roles > + and create a new role or

b. Select an existing role under Roles and click Access Rules for <Role> > New.

2. Select Time Range and select a time range from the drop-down list.

3. Click OK.

When a time range profile is enabled on a role, the role is made available to the users for the configured time range. For example, if the specified time range is 12:00–13:00, the role becomes available only between 12 PM and 1 PM on a given day.

If a time range is disabled, the role becomes unavailable for the configured time range. For example, if the configured time range is 14:00–17:00, the role is made unavailable from 2 PM to 5 PM on a given day.

In the CLI

To enable a role during a specific time-range:

(Instant AP)(config)# wlan access-rule <profile_name>

(Instant AP)(SSID Profile "<name>")# rule ... time-range <profile_name>

To disable a role during a specific time-range:

(Instant AP)(config)# wlan access-rule <profile_name>

(Instant AP)(SSID Profile "<name>")# no rule ... time-range <profile_name>