Wireless Access

Hi

I have found how to create a TIME RANGE under Security > Access Control > Time Range, however I do not know how to apply this Time Range to either a specific VLAN or WLAN or User Role.  I only want to apply it to the Guest Portal and not our WLANs we use for access to our domain.

Any advice would be apprecaited.

Thanks...

If you want to only have a WLAN available for a particular period of Time, you would configure a "Deny" time range (when you do not want anyone to connect), then you would insert that in the Virtual AP under Deny Time Range.  Configuration> Wireless> AP Configuration.  Edit your ap-group.  Expand Wireless LAN.  Expand Virtual AP.  Click on the virtual AP you want to apply it to.  In the right pane insert your deny time range in the Deny Time Range field and click on apply in the lower right hand corner.

Remember, the Deny Time range is the range when you want traffic to be Denied, not allowed...  Also make sure the time on the controller is set correctly, to avoid any issues.

ok, great that makes sense.

I'm in the Time Range configuration now -

How would I set this up in Time Range?

I want to turn off a WLAN from 7pm - 7am each weekday + all weekend?

i just tried adding a weekend time range, but when i hit apply it just dissapears?

thanks in advance

Add a periodic range on all weekdays from 19:00 - 23:59 and 00:00 to 07:00.  Also, add a range for all weekend days.  Make sure you save that time range with a name such as "no_WLAN_access".  Then, as Cjoseph said, go into the VAP for that SSID and select the time range above from the Deny Time Range drop down box.

done that thanks, but when I click apply it just dissappears, any ideas?

Just done it  again and checked they all appeared in the 'show commands' view below

i then click apply and it deletes all my entries.

attached is a screenshot

Are you sure you clicked the "Done" button before you click the "Apply" button?  If you click the "Apply" button before you click "Done", the changes wont be saved and the Time Range wont exist.

made a slight mistake above used daily instead of weekend, started again see below

No, didn't see that.  Sorry.

Can you log into the CLI and issue the commands shown in the lower window?  That should give us an idea why these are getting rejected.

haven't done this before - see below- is that correct?

Once you get to the > prompt on the controller, type "enable" and enter the enable password.  Once you have the "#" prompt, type "config t", then enter the time range commands.

I added each command and finished with ctrl+Z - is it automtaically written to flash?

To save it, do the command "write mem" from the # prompt.

should the entries appear in the gui interface?

Yes.  After you entered them in the CLI (if they were accepted... do a "show run | inc time-range" to verify), they should appear in the list of time ranges in the GUI.

All,

Shortly, I will be moving this topic under Aruba Products > ArubaOS and Mobility Controllers.

Back on it this morning -

completed the time-range commands I need ending with (ctrl+Z) and then saved the config. (which it confirmed)

However, there are no time-range entries when after I run show config | inc time-range.  I have also checked the GUI and none are displayed in that either.

What the hell is going on?

This is what I have for the defaults:

(host) #show configuration | include range
time-range night-hours periodic
time-range weekend periodic
time-range working-hours periodic
time-range night-hours periodic
time-range weekend periodic
time-range working-hours periodic

Please tell me if you see this or not.

nothing.

after I run

show config | inc time-range

nothing happens

Do you have the policy enforcement license installed?  Type "show keys" to determine that.

No I do not have the Policy Enforcement Firewall License - please don't tell me that's the reason!

see below

Please open a support, case, then.  According to the command reference guide, you should be able to configure a time range without the PEF-NG license.

ok, will do, thanks to all those that posted on this thread.

Hi,

Is there any update to this issue? I think i have the same issue.

Thanks.

If you need a quick answer, you might want to message the user who opened this thread, or open a case of your own.  

Did anyone find an answer to this?  I have made several support calls in regards to this and the issue was escalated to an engineer.  I even downgraded my firmware to 6.1.1.1 and 6.0.0.1.  Still no luck.

Please let us know when there is a determination from the engineer.  Since it is escalated, he has your detailed information and he would do better than us guessing.

I still haven't made any progress with this either.

Pburchell,

Do you have a case open?

As soon as I hear back, I will update everyone.

I don't have a support contrct with them. 

Just heard back from support.  Apparently, the PEF license is needed for this option.  Their response was:

1)   Either the customer is running this command on a controller which do not have PEF licenses or

2)    Customer is running this command on a local controller.

I guess they need to update their CLI guide to reflect this info.  Hope this helps you guys.

Brilliant !!

Thanks for the heads up.

This is the correct syntax.  You need to be in "config t" mode

-michael

I just noticed you other issue (where the time range just disappears).

Make sure you click Add on the main Time Range screen to start configuring a new range.  Click the periodic button, then enter a name for the range.  Click the add button, fill in the range info and click done.  Once that is done, click add again and put the next range in and click done.  Once you have all of the range info entered, click apply.  The time range should be created now.  All thats left to do add it to the VAP and save the configuration.