ZyXEL Communications 110, 1100, 310 18.3 User-awareAccess Control Example, ext-user, User Type, 1Click Configuration > Object > User/Group > User. Click the Add icon

Chapter 18 Authentication Policy

Table 96 Configuration > Auth. Policy > Add (continued)

LABEL	DESCRIPTION
Force User	This field is available for user-configured policies that require authentication. Select this to
Authentication	have the ZyWALL automatically display the login screen when users who have not logged in
	yet try to send HTTP traffic.
OK	Click OK to save your changes back to the ZyWALL.
Cancel	Click Cancel to exit this screen without saving.

18.3 User-aware Access Control Example

You can configure many policies and security settings for specific users or groups of users. Users can be authenticated locally by the ZyWALL or by an external (AD, RADIUS, or LDAP) authentication server.

In this example the users are authenticated by an external RADIUS server at 192.168.1.200. First, set up the user accounts and user groups in the ZyWALL. Then, set up user authentication using the RADIUS server. Finally, set up the policies in the table above.

18.3.1 Set Up User Accounts

Set up user accounts in the RADIUS server. This example uses the Web Configurator. If you can export user names from the RADIUS server to a text file, then you might configure a script to create the user accounts instead.

1Click Configuration > Object > User/Group > User. Click the Add icon.

2Enter the same user name that is used in the RADIUS server, and set the User Type to ext-userbecause this user account is authenticated by an external server. Click OK.

Figure 153 Configuration > Object > User/Group > User > Add

3Repeat this process to set up the remaining user accounts.

258
	ZyWALL 110/310/1100 Series User’s Guide