@Hank21 , thank you

 

I have created an ACL and will test it tonight.

 

Unfortunately, you can only use a time range for when the ACL rule is "ENABLED" and can only have a time range per day if using custom for individual days.

 

Hence I need to create two rules, first a permit rule using the time range, then a deny rule below it with no time range.

 

I created the MAC group with all kid's devices as the source and used the default IPGroup_Any to block all destinations.

 

It would be good to have the option to disable the ACL during the time range, so we would only need to create a single ACL.

 

Also, noticed that my kids devices were still connected to Wifi SSID last night after time range turned of the SSID Radio. I used the reconnect button through clients page to disconnect them. Appears current connections to SSID are not disconnected when the time range expires and SSID is turned off. I confirmed the SSID was of with my Phone before which it was, yet kids were still connected.

  @Hank21 

 

Confirm after testing using ACL with time range, I was able to create rules to block kids devices at night

Hello, I would like to do the same, and I created an ACL with a time range on a specific MAC Address, but the PC continues to have Internet. Would you please say me how you make the configuration ? Regards and thanks for your help. Serge

  @Sergiow57, you need to add two ACL rules, first a deny for Mac group with no time range, then above it add a permit for Mac group with the time range applied.

 

this is required as ACL rules with time ranges are only active during the time range.

 

For my two kids,  I created individual Mac groups and time ranges for each kid, I have one deny rule with both Mac groups allowing active and two permit rules with the time ranges.

 

This works great and means I no longer need a separate wifi SSID for the kids as I can manage it through the switches using ACL.

 

hope this helps

  @mstamp Can you please a screenshot of your config? 

 

Thanks

  @ArtVandelay 

 

Create a group with all devices using MAC Address. (Note if using Apple devices you need to turn "Private Wi-Fi Address" off in wifi settings or MAC address will change

.

Create time profile for when you want devices to be able to access network.

 

First create the "Deny" policy for group.

 

Then create the "Permit" policy for the group and time policy.

 

Finally, ensure that the permit policy is above the deny policy.

 

This has worked well for me, however, I've find sometimes devices are not blocked when permit policy should have turned off. either reboot devices or disable/enable the ACL rules has worked. you will also may need to create group/time range/ACL per child or person based on your requirements, for me as my kids are 8 and 15, I had to make 2.

 

good luck