ZyXEL ZyWALL ATP700 User Guide - Page 648
Ext-User Accounts, Ext-Group-User Accounts, Dynamic-Guest Accounts
View all ZyXEL ZyWALL ATP700 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 648 highlights
Chapter 34 Object Table 252 Types of User Accounts (continued) TYPE ABILITIES ext-group-user External group user account guest-manager Create dynamic guest accounts dynamic-guest Access network services LOGIN METHOD(S) WWW WWW Hotspot Portal Note: The default admin account is always authenticated locally, regardless of the authentication method setting. (See Chapter 34 on page 715 for more information about authentication methods.) Ext-User Accounts Set up an ext-user account if the user is authenticated by an external server and you want to set up specific policies for this user in the Zyxel Device. If you do not want to set up policies for this user, you do not have to set up an ext-user account. All ext-user users should be authenticated by an external server, such as AD, LDAP or RADIUS. If the Zyxel Device tries to use the local database to authenticate an ext-user, the authentication attempt always fails. (This is related to AAA servers and authentication methods, which are discussed in those chapters in this guide.) Note: If the Zyxel Device tries to authenticate an ext-user using the local database, the attempt always fails. Once an ext-user user has been authenticated, the Zyxel Device tries to get the user type (see Table 252 on page 647) from the external server. If the external server does not have the information, the Zyxel Device sets the user type for this session to User. For the rest of the user attributes, such as reauthentication time, the Zyxel Device checks the following places, in order. 1 User account in the remote server. 2 User account (Ext-User) in the Zyxel Device. 3 Default user account for AD users (ad-users), LDAP users (ldap-users) or RADIUS users (radius-users) in the Zyxel Device. See Setting up User Attributes in an External Server for a list of attributes and how to set up the attributes in an external server. Ext-Group-User Accounts Ext-Group-User accounts work are similar to ext-user accounts but allow you to group users by the value of the group membership attribute configured for the AD or LDAP server. See Section 34.9.5.1 on page 709 for more on the group membership attribute. Dynamic-Guest Accounts Dynamic guest accounts are guest accounts, but are created dynamically and stored in the Zyxel Device's local user database. A dynamic guest account has a dynamically-created user name and ZyWALL ATP Series User's Guide 648