Re: Time based Remote VPN.

You could use a cron job to clear the sessions at a specified time each day
e.g. after your time-based acl begins to limit access

Just a thought

Howard

On Wed, Dec 1, 2010 at 8:09 AM, Carlos G Mendioroz <tron_at_huapi.ba.ar> wrote:

> Carefull though...
> Authentication on IPSEC is done at tunnel setup time, and tunels are valid
> for some time afterwards (SA lifetime).
> Sounds to me that if the check is not done at the IPSEC gateway (i.e.
> the router), you will allow a tunnel setup at a valid time to stay
> up even at an invalid time.
>
> This might have some support on easyvpn server, dunno.
> -Carlos
>
> Nico Van Niekerk @ 30/11/2010 10:16 -0300 dixit:
>
> If you're authenticating against an ACS you can do it there.
>>
>> -----Original Message-----
>> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
>> amin
>> Sent: 30 November 2010 08:15 PM
>> To: ccielab_at_groupstudy.com
>> Subject: Time based Remote VPN.
>>
>> Hi experts,
>> Can I configure Easy VPN server to accept remote VPN just within a time
>> range?
>> Regards,
>> Amin
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>> **********************************************************************
>> This email and all content are subject to the following disclaimer:
>> http://content.momentum.co.za/content/legal/disclaimer_email.htm
>> **********************************************************************
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
> --
> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Dec 01 2010 - 09:49:07 ART