31

Authentication Objects

This chapter shows you how to select different authentication methods for user authentication using the AAA servers or the internal user database.

31.1 Authentication Objects Overview

After you have created the AAA server objects, you can specify the authentication objects (containing the AAA server information) that the ZyWALL uses to authenticate users (using VPN or managing through HTTP/HTTPS).

31.2 aaa authentication Commands

The following table lists the aaa authentication commands you use to configure an authentication profile.

Table 153 aaa authentication Commands

COMMAND

DESCRIPTION

aaa authentication rename

Changes the profile name.

profile-name-old profile-name-

profile-name: You may use 1-31 alphanumeric characters, underscores(_), or

new

 

dashes (-), but the first character cannot be a number. This value is case-sensitive.

 

 

clear aaa authentication

Deletes all authentication profiles or the specified authentication profile.

profile-name

 

 

Note: You can NOT delete a profile that is currently in use.

 

 

show aaa authentication {group-

Displays the specified authentication server profile settings.

namedefault}

 

[no] aaa authentication

Sets a descriptive name for the authentication profile. The no command deletes a

profile-name

profile.

[no] aaa authentication default

Sets the default profile to use the authentication method(s) in the order specified.

member1 [member2] [member3]

member = group ad, group ldap, group radius, or local.

[member4]

 

 

Note: You must specify at least one member for each profile. Each type of member

 

can only be used once in a profile.

 

The no command clears the specified authentication method(s) for the profile.

 

255

ZyWALL (ZLD) CLI Reference Guide