How can I set up the summary time during which wifi will work per day? Let me explain, I need wifi to work for a total of 2 hours a day, but at any time of the day., and after two hours it rejects new connections or simply turns off the interface.
In the current realization of the wifi scheduler or firewall I understand that can only set the time by hour/minute/day.. but this option is not suitable.
use luci-app-access-control
I tried to find this package, but opkg reports that there is no such package. I tried first on one router with firmware 24.10, and on another with firmware 23.05, and in both cases this package is missing.
*Before I finding the package, I performed an Update list.. (opkg update)
try wifischedule/ luci-app-wifischedule?
I've tried it, and it's not exactly what I need. Wifi Scheduler allows you to set the scheduler to turn wifi on/off according to a schedule, i.e. by day/hour, but it does not allow you to set the wifi operating time for a total of 2 hours per day.
Try luci-app-acl
Ah ok, so you want to limit connection time to 2 hours per client? I guess you need to set up some kind of radius server, or per client passphrase on WPA3, otherwise it would be really easy to circumvent.
Yes, you got it right.Can Radius server be deployed on openwrt? For example, I could use a separate mt7621 router for this, which is lying idle in my closet and which I am not using at the moment. Wpa2psk-aes.ccmp seems to me to be enough in my case, because, for example, my laptop is not certified for wpa3 and does not support this encryption protocol. I am ready to create a separate ssid to which only one client will be connected, and I want to limit it. I also want to note that restricting access to the mac address does not seem very reasonable to me, because almost all phones can currently connect to wifi using a random mac address.
Upd.But in general, the idea of a radius server seems to me too complicated for this, imho
Yes you can run radius on openwrt. You then need WPA2-enterprise (or wpa3-enterprise).
To setup a separate password per client without radius have a look at:
Individual per-passphrase Wifi VLANs using wpa_psk_file (no RADIUS required) - Installing and Using OpenWrt - OpenWrt Forum
That will authenticate per client, such that it will not be possible to just change mac address and reconnect for another 2 hours. But then I guess you need some kind of scripting that gets triggered on a DCHP request or something that e.g. starts a timer for 2 hours and at the end make a firewall rule to block forward to wan.
1 Like
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.