What You Need To Know - ZyXEL Communications USG40 User Manual

• The Group screen (see
addition, this screen allows you to add, edit, and remove user groups. User groups may consist of
access users and other user groups. You cannot put admin users in user groups
• The Setting screen (see
lockout settings, and other user settings for the ZyWALL/USG. You can also use this screen to
specify when users must log in to the ZyWALL/USG before it routes traffic for them.

32.2.1 What You Need To Know

User Account
A user account defines the privileges of a user logged into the ZyWALL/USG. User accounts are
used in security policies and application patrol, in addition to controlling access to configuration and
services in the ZyWALL/USG.
User Types
These are the types of user accounts the ZyWALL/USG uses.
Table 206 Types of User Accounts
TYPE
Admin Users
admin
limited-admin
Access Users
user
guest
ext-user
ext-group-user
Note: The default admin account is always authenticated locally, regardless of the
authentication method setting. (See
about authentication methods.)
Ext-User Accounts
Set up an ext-user account if the user is authenticated by an external server and you want to set
up specific policies for this user in the ZyWALL/USG. If you do not want to set up policies for this
user, you do not have to set up an ext-user account.
All ext-user users should be authenticated by an external server, such as AD, LDAP or RADIUS. If
the ZyWALL/USG tries to use the local database to authenticate an ext-user, the authentication
attempt always fails. (This is related to AAA servers and authentication methods, which are
discussed in those chapters in this guide.)
Note: If the ZyWALL/USG tries to authenticate an ext-user using the local database, the
attempt always fails.
Chapter 32 Object
Section 32.2.3 on page
Section 32.2.4 on page
ABILITIES
Change ZyWALL/USG configuration (web, CLI) WWW, TELNET, SSH, FTP, Console
Look at ZyWALL/USG configuration (web, CLI)
Perform basic diagnostics (CLI)
Access network services
Browse user-mode commands (CLI)
Access network services
External user account
External group user account
ZyWALL/USG Series User's Guide
519
524) provides a summary of all user groups. In
525) controls default settings, login settings,
LOGIN METHOD(S)
WWW, TELNET, SSH, Console
WWW, TELNET, SSH
WWW
WWW
WWW
Chapter 32 on page 576 for more information