Remote Access Policy Profile Settings
You specify additional restraints on VPN connections associated with a remote access policy to limit how long VPN sessions can last, when and if to disconnect after a period of inactivity, limit the days and hours during which connections are allowed, limit which authentication methods are allowed and identify how IP addresses are assigned to VPN clients. Here are the dial-in profile settings you can specify. (You don't need to specify any options on the Multilink tab because they aren't relevant to VPN connections.)
Dial-in Constraints Tab
You can specify the number of minutes that the VPN connection can remain idle before it's disconnected, the number of minutes that the client can be connected, and the days and times on which the remote user can connect to the network. The day/time setting is similar to the day and time restrictions condition that you can specify in a remote access policy; however, the dial-in day/time setting specifically denies access except during the specified periods. The remote access policy's day/time condition lets you apply different policies according to day and time-for instance, you could specify different IP filters for different days and times. . . .