Administrator Guide

80 | W-ClearPass Guest Manager Dell Networking W-ClearPass Guest 6.5.0 | User Guide
Example: default allow; not period 23:00 to 6:00 (on 2 separate lines) allows access, except
between 11pm and 6am.
Example: period 6:00 to 23:00 is equivalent to the example in the previous line.
l not before [date-and-time]
Specifies an absolute time before which access will always be rejected.
Example: not before 2010-07-01 09:00 matches after 9am on 1 July 2010.
l not after [date-and-time]
Specifies an absolute time after which access will always be rejected.
Example: not after 2011-01-01 00:00 matches before midnight on New Year's Day 2011.
l [not] abs(olute) [start-date-and-time] to [end-date-and-time]
Specifies a start and end interval. The date and time is a format recognized by strtotime(). Times between
the start and end point are matched. The 'not' keyword may be specified to invert the allow/deny decision.
Example: absolute December 25 to December 26 matches all day on Christmas Day each year. (This
does not match on December 26 as midnight on this date is the endpoint of the interval.)
A blank time ACL means "all times are allowed".
The following examples give common usage:
l 8:00 to 18:00 - allows access 8am to 6pm, every day, but not outside those times
l weekdays 9am to 5pm - allows access 9am to 5pm, Monday through Friday, but not outside those times
l weekdays 9am to 5pm
weekends 10am to 4pm - allows access 9am to 5pm, Monday through Friday, with reduced hours on
Saturday and Sunday
Annual recurrences may be specified:
l weekdays 9am to 5pm
not absolute December 25 to December 26 - allows access 9am to 5pm, Monday through Friday,
but not on Christmas Day
Less common cases:
l default allow
not 23:00 to 6:00 - allows access, except between 11pm and 6am daily
l 9:00 to 18:00
not before 2010-02-01 - allows daily access between 9am and 6pm, starting on February 1, 2010
l time zone Etc/GMT
9:00 to 18:00
not before 2010-02-01 - allows daily access between 9am and 6pm, starting on February 1, 2010, in
the GMT time zone (useful if server is in a different time zone)
About AirGroup Time-Based Sharing
This section discusses time-based sharing policies for an AirGroup shared device.
For information on the syntax for time-based sharing policies for a AirGroup shared devices, see "AirGroup
Time-Based Sharing Syntax Examples" on page 76
Time-based sharing is used in settings where an organization's shared devices are made available to groups of
users according to a regular schedule, and device access is configured by group at the user level—for example: