Catalyst 9800 控制器內置了對 WLAN 可用性調度的支持。當 WLAN 被禁用時,AP 不會廣播 SSID,並且信道利用率會降低。此外,它還可以作爲安全增強功能來實現,以防止客戶端設備在指定時間進行連接。在開始之前,請仔細檢查控制器上的時間設置,啓用 NTP 客戶端並設置正確的時區。
選項 1:內置日曆配置文件(calendar-profile)
我的示例啓用每週上午 9 點到下午 5 點映射到“default-policy-profile”的所有 WLAN。在這些時間之外,SSID 將無法供客戶端加入。
configure terminal ! wireless profile policy default-policy-profile shutdown ! no wireless profile calendar-profile name WEEKDAYS-9-TO-5 ! wireless profile calendar-profile name WEEKDAYS-9-TO-5 day monday day tuesday day wednesday day thursday day friday recurrence weekly start 09:00:00 end 17:00:00 ! wireless profile policy default-policy-profile calendar-profile name WEEKDAYS-9-TO-5 action wlan_enable no shutdown !
確認
您可以使用 Wi-Fi 客戶端進行驗證。如果您執行“show wlan summary”,WLAN 仍將顯示爲“Enabled”,這是預期的。要驗證日曆配置文件控制的 WLAN 的當前狀態,請使用“show logging | include SCHEDULED_WLAN”。
配置參考:https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_deny_wireless_client_session_estbl.html#id_109520
選項 2:EEM 腳本
如果您喜歡靈活性,那麼由 CRON 觸發的在控制器上運行的 EEM 腳本可能更適合您。
event manager applet EEM_SCHEDULE_WLAN_UP event timer cron cron-entry "0 9 * * 1-5" name 9_AM_MON_TO_FRI action 1.0 cli command "enable" action 2.0 cli command "conf t" action 3.0 cli command "wlan MY_SSID" action 4.0 cli command "no shut" action 5.0 cli command "end" action 6.0 syslog msg "Scheduled WLAN_SSID has been enabled" event manager applet EEM_SCHEDULE_WLAN_DOWN event timer cron cron-entry "0 17 * * 1-5" name 5_PM_MON_TO_FRI action 1.0 cli command "enable" action 2.0 cli command "conf t" action 3.0 cli command "wlan MY_SSID" action 4.0 cli command "shut" action 5.0 cli command "end" action 6.0 syslog msg "Scheduled WLAN_SSID has been disabled"
這裏有一些有用且實用的EEM示例供您參考。
https://community.cisco.com/t5/wireless-mobility-knowledge-base/automated-backup-ssid-with-eem-on-catalyst-9800-wireless/ta-p/3743838
https://community.cisco.com/t5/networking-knowledge-base/cisco-eem-basic-overview-and-sample-configurations/ta-p/3148479
原文:https://www.jiribrejcha.net/2020/08/schedule-wlan-availability-on-catalyst-9800-series-wireless-lan-controllers/