Community discussions

MikroTik App
 
mworsnop
newbie
Topic Author
Posts: 28
Joined: Mon Apr 18, 2016 8:34 am

AP Access Rule doesnt drop connection

Mon Apr 18, 2016 8:37 am

I have an AP Access Rule with a time constraint, and it works great if the client is not connected. However if they are already connected then when the time comes the client remains connected. If they drop off and try to then come back it works properly.
 
User avatar
soonwai
Member Candidate
Member Candidate
Posts: 186
Joined: Mon Feb 06, 2012 10:50 pm
Location: Kuala Lumpur

Re: AP Access Rule doesnt drop connection

Mon Apr 18, 2016 5:50 pm

Can you post the config? You're talking /interface wireless access-list correct?

Anyway if you have an Access List allowing access at certain times, you also need a complementary rule disallowing access at other times.
Last edited by soonwai on Mon Apr 18, 2016 5:55 pm, edited 1 time in total.
 
mworsnop
newbie
Topic Author
Posts: 28
Joined: Mon Apr 18, 2016 8:34 am

Re: AP Access Rule doesnt drop connection

Mon Apr 18, 2016 5:55 pm

Yes the wireless access point. I dont know how to use the command line very well. I use the GUI for most everything. Could you please tell me what I exactly you would like to see and what to enter to get that info?

I am wondering if its because I have 2 rules. One from 00:00 to 08:00 and a 2nd on from 21:00 to 23:59

But as I said it works if the client drop the connection and then it wont let them back on again so I would guess its setup right?

Thanks for the the help!
 
User avatar
soonwai
Member Candidate
Member Candidate
Posts: 186
Joined: Mon Feb 06, 2012 10:50 pm
Location: Kuala Lumpur

Re: AP Access Rule doesnt drop connection

Mon Apr 18, 2016 5:57 pm

Open a New Terminal from winbox or webfig and type:
/interface wireless access-list export
That will print out the configuration. Much easier than trying to describe it.
 
mworsnop
newbie
Topic Author
Posts: 28
Joined: Mon Apr 18, 2016 8:34 am

Re: AP Access Rule doesnt drop connection

Mon Apr 18, 2016 6:09 pm

/interface wireless access-list
add authentication=no forwarding=no interface=ISMH mac-address=\
E8:2A:EA:B6:05:F8 time=\
0s-9h,sun,mon,tue,wed,thu,fri,sat
add authentication=no forwarding=no interface=ISMH mac-address=\
E8:2A:EA:B6:05:F8 time=\
22h10m-23h50m,sun,mon,tue,wed,thu,fri,sat
 
User avatar
soonwai
Member Candidate
Member Candidate
Posts: 186
Joined: Mon Feb 06, 2012 10:50 pm
Location: Kuala Lumpur

Re: AP Access Rule doesnt drop connection

Mon Apr 18, 2016 6:55 pm

I just tried it and it seems to work.
/interface wireless access-list
add authentication=no forwarding=no time=23h50m1s-23h59m,sun,mon,tue,wed,thu,fri,sat vlan-mode=no-tag
add time=23h44m-23h50m,sun,mon,tue,wed,thu,fri,sat vlan-mode=no-tag
I added the above 2 rules. It was 23:47, all 3 of my iPads can be seen in /interface wireless registration-table.

As soon as the time changed to 23:50, all 3 devices were disconnected.

Let's see what happens at 00:00. 4 more mins to go.

OK, they didn't come back but i think they connected to my other AP. Will have to test again.

I suggest you add both off and on ACLs to cover the entire 24hr period.

Who is online

Users browsing this forum: mkx and 27 guests