Access Period Policy
You can specify an access period policy for an access policy or an access scenario. An access period policy comprises the validation time, end time, default access type/default match action, and access period.
When an access period policy is specified for an access policy, the following rules apply:
If the current time is not in the validity time range of the access period policy, UAM controls network access according to the default access type of the access period policy: Access Allowed or Access Forbidden.
In the validity time range of the access period policy, network access is controlled based on the access time, type, and priority of the access period a user matches.
For example, you may want to permit accesses to the network daily only between 10 a.m. and 12 a.m. in 2010. To do this, specify the time span for the policy as 2010-01-01 00:00:00 to 2010-12-31 23:59:59, create an access period from 10:00 to 12:00, and set the time period type to By Day.
If two or more time periods overlap each other, UAM merges them into a larger, continuous time period. For example, if time ranges 10:00 to 11:30 and 10:00 to 12:00 are defined, UAM merges them into 10:00 to 12:00.
Functions
Parameters
- Service Group: Select a service group for the access period policy. The service group ensures privilege management of the access period policy. The administrators and maintainers can add the access period policy to one of the service groups to which they have the management privilege.
- Default Access Type/Default Match Action: The default access type applies to the access policy. It determines whether an endpoint can access the network if its access time is out of the time ranges configured for the access period list. Options of the default access type are Access Allowed and Access Forbidden. The default match action applies to the access scenario. It determines whether to match the current access scenario if the access time of the endpoint is out of the time ranges configured for the access period list. Options of the default match action are Match and Not Match.
- Access Type/Match Action: The access type applies to the access policy and it determines whether the endpoint can access the network within the access period. Options of the access type are Access Allowed and Access Forbidden. The match action applies to the access scenario and it determines whether the current access time matches the current access period. Options of the match action are Match and Not Match.
- Priority: Specifies when multiple time periods overlap, the access type for which the time period has a higher priority.
Related Topics