In the access list you can specify which days you want the user to have a connection and within that day at what specific time.
Creating a time-based access list on MikroTik devices, through RouterOS, allows you to restrict network access based on specific times.
This setting can be applied both for limitations within a single day and for restrictions that span multiple days. The flexibility of the system allows you to define rules that fit your specific needs, whether limiting access to certain times of the day or on specific days of the week.
For example, you can configure an access list to allow network access only during business hours Monday through Friday and restrict it during the weekend, or allow special access during certain hours on specific days for events or scheduled maintenance.
Configuration is done on the MikroTik RouterOS firewall and may involve using the features of time-based firewall rules. These rules are configured by specifying time parameters directly in the firewall rules, where you define the start and end of the allowed period. You can specify:
- Start time and stop time: Defines a time range during which the rule is active.
- Days of the week: Allows you to specify the days of the week on which the rule applies.
- Date (date): For restrictions that apply to specific dates.
Here's a basic example of what a rule might look like in RouterOS to allow Internet access only during business hours Monday through Friday:
/ip firewall filter add action=accept chain=forward comment="Permitir acceso laboral" \
time=8h-17h,mon,tue,wed,thu,fri place-before=0
This rule would allow traffic from Monday to Friday from 8:00 a.m. to 17:00 p.m. Outside of these hours, subsequent rules would determine traffic treatment, which would usually involve restrictions or denials based on your specific network configuration.
The time-based approach to firewall access lists and rules provides great versatility to manage network access and security based on operational needs and usage policies.
There are no tags for this post.