User's Manual

is in effect. (The rule could instead have been written "periodic mon 9am to 5pm shared roles default_role,
other_role" if this was the desired result.)
This example shows how to use an overlapping time range: place the most general time range first, with
more specific time ranges later. In particular, reversing the order of the periodic statements will not work.
Example:
default deny
periodic 9:00 to 22:00 shared roles default_role
no periodic thu 9:00 to 17:00
periodic fri 9:00 to 17:00 not shared
This example shows how to share a device with a basic policy, and demonstrates two ways to disable
sharing for a subset of the time period.
The device will be shared with a single role named default_role, from 9:00 to 22:00 each day. ("periodic
9:00 to 22:00 shared roles default_role").
On Thursday, the device is not shared between 9:00 and 17:00.
On Friday, the device is not shared between 9:00 and 17:00.
Example:
default allow
periodic 9:00 to 22:00 shared roles default_role
no periodic thu 9:00 to 17:00
periodic fri 9:00 to 17:00 not shared
This example is similar to the previous example; the device is not shared on Thursday and Friday between
9:00 and 17:00.
The difference is after 22:00 and before 9:00: in the previous example, the device is not shared during this
time period, whereas with default allow the other AirGroup sharing rules will take effect (any shared users,
roles, groups or locations that have been defined for the device).
Time-Based Syntax Reference
This reference describes the syntax used for time formats in time-based sharing rules. It supplements the
examples for AirGroup time-based sharing by user groups discussed in "AirGroup Time-Based Sharing Syntax
Examples" on page 71. For more information on using time-based sharing with AirGroup, see "About AirGroup
Time-Based Sharing" on page 75.
The syntax for AirGroup time-based sharing policies supports all the default time-based ACL rules specified in
TimeRangeACL. This ACL is a sequence of rules, one per line, according to the following syntax:
l default allow|deny
Specifies the default behavior for unmatched times; this is 'allow' only if no 'periodic' or 'absolute' rules are
specified, otherwise it is 'deny'. Use 'default allow' if the remaining rules exclude times, otherwise use
'default deny' if the remaining rules are to include times. This rule may only be used once.
l [time] zone default|server|...
Specifies the time zone to use for matching times and specifying the time of day. If unset, the current time
zone setting is used (note that this may vary due to operator and/or profile settings). If the value "default"
or "server" is specified, the system's time zone is used. Otherwise, the named time zone is used. This rule
may only be used once, and must be before any rules specifying a time interval.
l [not] period(ic) [day-list] hh:mm to [day] hh:mm
Specifies a periodic or daily interval. Recognized days include Sunday, Monday, Tuesday, Wednesday,
Thursday, Friday, Saturday and 3-letter abbreviations; the tokens "weekends" and "weekdays" may also be
Dell Networking W-ClearPass Guest 6.4 | User Guide W-ClearPass Guest Manager | 73