FortiOS 5.2 Authentication: BYOD scheduling

This recipe shows how to use a schedule group and a BYOD device policy to permit mobile device Internet access before and after class time and during lunch. The school is open from 7am to 6pm.

1. Creating schedules and a schedule group

Go to Policy & Objects > Objects > Schedules. Create recurring schedules for the before class (7-9 am), lunch (12-1 pm), and after class (3-6 pm) periods.

Select Create New > Schedule Group and add create the schedule group by adding the outside of class time schedules to a schedule group.

2. Creating a policy to block mobile devices outside of class time

Go to Policy & Objects > Policy > IPv4 and create a policy that allows Internet access for mobile devices on the Student-net wireless network according to the schedule.

Set Incoming Interface to the wireless interface, Source Device Type to Mobile Devices (a default device group that includes tablets and mobile phones)*, Outgoing Interface to the Internet-facing interface, and set Schedule to the new schedule group.

3. Results

Verify that mobile devices can connect to the Internet outside of class time, when the schedule group is valid.

Go to Log & Report > Traffic Log > Forward Traffic to view mobile device traffic.

When the time in the schedule is reached, further surfing cannot continue.

This traffic does not appear in the logs, as only allowed traffic is logged.