We use external WiFi APs throughout our campus with a guest SSID named Public-Internet. Those APs are on a dedicated VLAN, untagged on port 2 (Guest network) of the Keenetic so we can differentiate it from the Home network.
When the campus is closed, we want to avoid people from using our Wifi and Internet connection. They usually can reach the Wifi signal from the street.
Since hour APs can't do schedules as we want to, I created a schedule on the Keenetic that will allow using our Wifi on specific hours only.
The way it is designed by Keenetic would allow me to use the schedule on the internal Wifi of the router, but not on a specific port, nor outbound firewall rules (at least not from the WebGUI ).
I hope I make myself clear