Time-based access to WLAN/building for specific users using WCS/ACS

Here's our situation:
WCS: 7.0.172.0
ACS: 4.2(1)
MSE: 6.0.75.0
For an hour or two each day during an event, we're trying to figure out how to prevent students from connecting to the wireless in a particular building.
All students are in the same WLAN. Everybody on campus uses the same SSID. We dynamically assign users to WLANs based on who they are through ACS. In addition to 802.1x authentication, MAC address authentication is performed by way of ACS to our in-house NAC system, where all students have registered their computers with us. This currently uses the External ODBC Database option in ACS.
Our contraints:
- We want them to be able to access wireless at other campus areas during this time, just not in this one building.
- Faculty/Staff needs to use the wireless in that building during that time. This prevents me from simply shutting down the radios temporarily.
Has anybody attempted anything similar? Anybody have any thoughts or ideas?
Ethan A. Cooper
Network Administrator
LeTourneau University

Currently, IP and IPX extended access lists are the only functions that can use time ranges. The time range allows the network administrator to define when the permit or deny statements in the access list are in effect. Prior to this feature, access list statements were always in effect once they were applied. Both named or numbered access lists can reference a time range.
For the further description following URL for the Time-Based Access Lists will help you.
http://www.cisco.com/en/US/docs/ios/12_0t/12_0t1/feature/guide/timerang.html#wp10236
I hope it may help you.

Similar Messages

Time-based access controls

Hello all,
Is there a time-based access control that can be configured for a 4.2 WCS+WiSM setup either in the WCS or controller? Or am I limited to the ACLs for my Wireless VLAN on the switch. Ultimately, I would like to be able to configure certain APs to accept/deny connections at specific times of the day. Any suggestions would be appreciated. Thank you in advance for your time and help.
Charles

Currently, IP and IPX extended access lists are the only functions that can use time ranges. The time range allows the network administrator to define when the permit or deny statements in the access list are in effect. Prior to this feature, access list statements were always in effect once they were applied. Both named or numbered access lists can reference a time range.
For the further description following URL for the Time-Based Access Lists will help you.
http://www.cisco.com/en/US/docs/ios/12_0t/12_0t1/feature/guide/timerang.html#wp10236
I hope it may help you.

How can I set the time in Time-based Access control ??

I live in Denmark, where we use the 24 hour system.
So I want to set the time-based access control to from 7.00 in the morning to 2.00 at night, but every time the Timecapsule says wrong time format, I can use the night time 23.59, but thats not late enough.

Set two controls.. 7 to 23.59 and 00.01 to 00.20
This is common as the control cannot handle times longer than 1day.

How to apply Software Restriction policy for specific user in local group policy object ?

I am working on implementing user based software restriction policy programmatically for local group policy object.
If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
I achieved what i wanted but is it right to modify registry values ?
PS:- I am using Igrouppolicyobject API

I achieved what I wanted but is it right to modify registry values ?
You also can modify a registry programmatically based policy. Check this:
http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Log transactions for specific users

Hi, How can I get the log for specific users, such as SAP_ALL : I want to know which transactions they have accessed in the last month for example or if they have accessed to a specific transaction.
Thks !

Hi,
try tranction ST03N (Workload Monitor)and select "User Profile" in the Analysis View. There, you can see a list of Users. Double click on any of them to see the accessed transactions.
Kind regards
Dirk

Disable sound for specific users

How do I disable sound for specific users?

Theoretically if the user's not in the audio group, he shouldn't have access to sound devices.
$ ll /dev/snd/
total 0
drwxr-xr-x 2 root root 80 Oct 2 19:30 by-path
crw-rw----+ 1 root audio 116, 2 Oct 2 19:30 controlC0
crw-rw----+ 1 root audio 116, 8 Oct 2 19:30 controlC1
crw-rw----+ 1 root audio 116, 7 Oct 2 19:30 hwC0D0
crw-rw----+ 1 root audio 116, 13 Oct 2 19:30 hwC1D0
crw-rw----+ 1 root audio 116, 14 Oct 2 19:30 hwC1D1
crw-rw----+ 1 root audio 116, 15 Oct 2 19:30 hwC1D2
crw-rw----+ 1 root audio 116, 16 Oct 2 19:30 hwC1D3
crw-rw----+ 1 root audio 116, 4 Oct 4 09:12 pcmC0D0c
crw-rw----+ 1 root audio 116, 3 Oct 4 10:13 pcmC0D0p
crw-rw----+ 1 root audio 116, 5 Oct 2 19:30 pcmC0D1p
crw-rw----+ 1 root audio 116, 6 Oct 2 19:30 pcmC0D2c
crw-rw----+ 1 root audio 116, 9 Oct 2 19:30 pcmC1D3p
crw-rw----+ 1 root audio 116, 10 Oct 2 19:30 pcmC1D7p
crw-rw----+ 1 root audio 116, 11 Oct 2 19:30 pcmC1D8p
crw-rw----+ 1 root audio 116, 12 Oct 2 19:30 pcmC1D9p
crw-rw----+ 1 root audio 116, 1 Oct 2 19:30 seq
crw-rw----+ 1 root audio 116, 33 Oct 2 19:30 timer

How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR

Hi,
How to get Reports for specific User that how many password has been reset using FIM SSPR in FIM 2010 R2 SSPR
Regards
Anil Kumar

Hello there Anil,
A simple way to quickly get a overview is to look at the request history within the portal environment (note that this will expire in a few day based on your environment, after that you would need to FIM Reporting Module - but you could increase this to
maybe 60 days to so, watch the DB size).
To do this you could create some custom search scopes of do some custom queries. The creator of the SSPR activities always has the same GUID so you can use that so search.
In your search scope you can use the following XPath to play with.
- All Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and Operation='Put']
- All Completed Password Reset Requests - /Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and RequestStatus=‘Completed']
You can play with the "RequestStatus".
Hope this helps.
Almero Steyn (http://www.puttyq.com) [If a post helps to resolve your issue, please click the "Mark as Answer" of that post or "Helpful" button of that post. By marking a post as Answered or Helpful, you help others find the answer
faster.]

How can i open period for specific user in OB52.

Hi Expert,
How can i open period for specific user in OB52. As 'Authorisation Group' field is there in OB52, how can i use this field to restrict the specific user to post for particular period. How can i creat authorisation group and where can i assign it to the particular user...
Please let me know?
Thanks and regards,
Sam.

Hi,
Here is the detailed process as outlined in SAP help.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
Thanks
Venkata Ganesh Perumalla

Restore using Time Machine to new hard drive, but last "full" backup was 2012. how do I restore the rest of the Time Machine backups, particularily IPHOTO libraries for each user?

Restore using Time Machine to new hard drive, but last "full" backup was in 2012. How do I restore the rest of the Time Machine backups, particularily IPHOTO libraries for each user?
I entered Iphoto for my user and only photo up until 2012 were in the library. I thought the restore would do the incremental Time Machine backups too.....
Running 10.8.2

It usually means you are running Mavericks but have an earlier version of iPhoto. Open the App Store and upgrade your version of iPhoto to the Mavericks version.
The iWork apps are free with a new iOS device since 1 SEP 2013. They are free with a new Mac since 1 OCT 2013. They are also free with the upgrade to OS X Mavericks 10.9 if you had the previous version installed when you upgraded.The iWork apps are free with a new iOS device since 1 SEP 2013. They are free with a new Mac since 1 OCT 2013. They are also free with the upgrade to OS X Mavericks 10.9 if you had the previous version installed when you upgraded.
iWork and iLife for Mac come free with every new Mac purchase. Existing users running Mavericks can update their apps for free from the Mac App Store℠. iWork and iLife for iOS are available for free from the App Store℠ for any new device running iOS 7, and are also available as free updates for existing users. GarageBand for Mac and iOS are free for all OS X Mavericks and iOS 7 users. Additional GarageBand instruments and sounds are available for a one-time in-app purchase of $4.99 for each platform.

Find Label Missing in Advanced Search For Specific User

for specifi users FIND label is showing but some of the users in advanced search this find label is missing . top of the applictaion it is there
plz let me know why this is problem is coming
find button should visible to all users......................
give me repaly ASAP

Hi
CRM 5.0
its not related to application,modification ..but my problem is the find label is working for some of the users.but some of the users find label is not there,
plz let me know where i have to make corrections for this problem........

Data Level security for specific Users

Hi,
Can you please suggest some ideas on by-passing the Data Level security for specific users or specific group?
Currently, we have data level security defined on a group permissions for one group and for people belonging to another group, the security should not apply and they should see entire data.
But, key thing here is that, the user belongs to both the groups.
Any ideas helps.
Thanks,
Chandu.

So you are saying you want a user to belong to a group with data-level security filters, but you don't want the filters to apply to that user?
Why are they in the group then?
Are the data filter defined with variables or are the hard-coded?
If variables, you may be able to put logic in initialization block to set the variable appropriately for specific users.
I'd rethink the security model - when I define data level security filters, I tend to force users to only belong to a single group/role.

Hide settings icon for specific users

Hi
In share point 2013 we have settings icon at top right corner.
Is there any way, I can hide this icon for specific users.
Please help in this regard.
Thanks,
Anil

Hi Kumar,
Its possible.
1.Open the .master page in some textpad/SP Designer.
2.Look for below tag. This is the holder for SITE ACTIONS
<SharePoint:SiteActions
3.Look for the Menu item templates. These will clearly give you an idea on wht they will hold.
<SharePoint:MenuItemTemplate
4.There will be 2 attributes for each menu item called
PermissionsString & PermissionMode.
In the permission string give the required permission to the user to be shown or hide.
http://sharepoint.stackexchange.com/questions/66628/edit-settings-gear-icon
Please remember to click 'Mark as Answer' on the answer if it helps you

Hiding P0002-PERID for specific users

Does anyone know how to hide the social security number field field for specific users? We are trying to hide it both at the header level and detail level of IT 0002.
Thanks

Jeff,
Follow this link http://www.*********************/hr_security/hr_security.htm, otherwise request your SAP Security person/team.
Thanks,
Kiran.

MIGO - Challan NO : Feild mandatory for specific user

Hi Experts,
I want to make the Callan No in the MIGO as mandatory for specific users.Can any body tell me how to do this ?
Regards,
Lakshmi.

Dear
There is two possibility.
1 - SPRO->Material Management->IM and PI-> Settings for enjoy transactions ->settings for goods Movements (MIGO)->Field selection for MIGO.Then against Field name choose the radio button Req.
This will impact for all the user.
2 - If you would like to restrict for particuar user than use of SHD0.
Create screen/transaction variant of MIGO through SHd0. In this put your req. field compulsory.Revoke the authorization of MIGO from particular user and assing the new transaction code done through SDH0 to this user.
Due to this you can control req. entry in MIGO for particular user.
Regards
Rajan

Need SP_TN for specific user must use specific document series and warehouse in Marketing Documents

Hi experts,
   I need SP_TN for specific user must use specific document series and warehouses in Marketing Documents SAP B1.
   Kindly give solution ASAP.
Thanks in advance

Hi Nagarajan,
   It show (1) Not allowed to add PO.
   I used the following SP
IF @object_type = '22' AND @transaction_type IN (N'A',N'U')
BEGIN
IF Exists
(SELECT T0.DocEntry FROM POR1 T0 INNER JOIN OPOR T1 ON T0.DocEntry = T1.DocEntry
WHERE T1.DocType = 'I' AND T1.Series = '142' OR T1.Series = '145' AND T0.[WhsCode] = 'STEX-01'
or T0.[WhsCode] = 'STNEX-01' and T1.[UserSign] ='1'
and T1.docentry = @list_of_cols_val_tab_del)
BEGIN
SELECT @error = 1
SELECT @error_message = 'Not allowed to add PO'
END
END
warm regards,
Guhan

Time-based access to WLAN/building for specific users using WCS/ACS

Similar Messages

Maybe you are looking for