Scheduling VPN

[Danjns]

Hi, does anyone know of a way to be able to schedule device-wide VPN for an iOS client? I'd like to be able to enable a VPN during work hours (say 9am - 6pm) so that all traffic is managed by an MX at HQ. Then allow users to use unfiltered internet 'after hours'.

I'm guessing if it's not built into SM it might be possible with API and adding/removing tags... Anyone have any experience with this that can point me in the right direction?

Cheers!

[Danjns]

Bump

[WadeAlsup]

Hi @Danjns, 

I have not tried this myself, but I think you could create a Time-Based Tag in Systems Manager > Configure > General specifying the hours that you want. Then tie that tag to a SM profile containing your VPN for the devices. Then tag your devices with the time-based tag.

Let me know if that will work! 

[PeterJames · Accepted solution]

@WadeAlsup Has it.

Meraki 'Time-Based Tags' documentation Link

This would require you to set up two profiles, once with restrictions and one with a difference. And then applying the restricted one during the times specified. I would definitely read this document 'Scoping Profiles and Apps'.

The only thing that needs to exist in the second profile is that one particular difference.

Thank you,
Peter James

[jared_f]

I second @WadeAlsup and @PeterJames, time tags are the way to go. Just a tip - confirm that your Meraki sever is set to your local time. Ours was not when we started using time tags and profiles were syncing down at the wrong times. 

[Danjns]

Thanks!