RE: Time based Remote VPN.

I can't think of anything else that has already been mentioned. If there is
a way on IOS locally I am not sure what it is. Access hours in ACS as Nico
mentioned will do it or ASA has already been mentioned below by Ryan and
Andrew. There may be something else but I am not sure.

Regards,
 
Tyson Scott - CCIE #13513 R&S, Security, and SP
Managing Partner / Sr. Instructor - IPexpert, Inc.
Mailto: tscott_at_ipexpert.com

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Ryan
West
Sent: Tuesday, November 30, 2010 8:35 AM
To: karim jamali; amin; Cisco certification
Subject: RE: Time based Remote VPN.

On an ASA, you can use vpn-access-hours combined with a time-range. I use a
similar configuration to jail unmatched LDAP authorization requests, which
sends them to a group with an invalid time-range.

-ryan

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
karim jamali
Sent: Tuesday, November 30, 2010 3:53 AM
To: amin; Cisco certification
Subject: Re: Time based Remote VPN.

Dear Amin,

I am not sure I guess Tyson/Piotr however I believe this might work (never
tested it though):

If you create a time based ACL allows IPSec/ISAKMP traffic only throughout
times/recurring..etc based on a time range and then apply the ACL to the
interface terminating the tunnel, this might do it.

There might be a functionality within EasyVPN Server that can do this
however I am not aware of it.

HTH,

On Tue, Nov 30, 2010 at 9:15 PM, amin <amin_at_axizo.com> wrote:

> Hi experts,
> Can I configure Easy VPN server to accept remote VPN just within a
> time range?
> Regards,
> Amin
>
>
> Blogs and organic groups at http://www.ccie.net
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--
KJ
Blogs and organic groups at http://www.ccie.net