access switch 2509 question - user login time???

[clumsymonkey]

Is there a way to configure when and how long a user can login for??? I know how to set priviledge levels for a user, but is there any way of controling what days they can login on, on the 2509?????

 

[KiscoKid]

The nearest thing I can think of that covers what you're looking for are time-based ACL's. It's been supported on the 2500 since IOS 12.1.

As ACL's are applied to a lot of different routing functions inc. Filtering, QoS, PBR plus a lot more, you can impose a lot of control in a number of ways of any user(s).

The following ACL explains how to setup time-based ACLs and extends their use by incoporating them into a QoS policy:

http://www.cisco.com/en/US/tech/tk543/tk759/technologies_tech_note09186a00801aa69d.shtml#topic1

 

[KiscoKid]

I've realised I need to expand on this. If you create a time-based ACL, you can apply this to your VTY access list. I've never actually tried this but I don't see why it wouldn't restrict what times of day a user can remotely access the device in question.

 

[Microbyte]

Go to line config (vty or con) and set exec-timeout you want to restrict.

Microbyte