ZyXEL Communications ZyWall ATP series User Manual page 591

Table 239 Configuration > Object > User/Group > Setting (continued)
LABEL
#
User Type
Lease Time
Reauthentication Time
Miscellaneous Settings
Allow renewing lease time
automatically
Enable user idle detection
User idle timeout
Login Security
Password must changed
every (days):
Password reset link (FQDN/
IP):
Enable Password
Complexity
Chapter 34 Object
DESCRIPTION
This field is a sequential value, and it is not associated with a specific entry.
These are the kinds of user account the Zyxel Device supports.
• admin - this user can look at and change the configuration of the Zyxel
Device
• limited-admin - this user can look at the configuration of the Zyxel Device
but not to change it
• user - this user has access to the Zyxel Device's services but cannot look at
the configuration
• guest - this user has access to the
at the configuration
• ext-user - this user account is maintained in a remote server, such as RADIUS
or LDAP. See Ext-User Accounts on page 583
type.
• ext-group-user - this user account is maintained in a remote server, such as
RADIUS or LDAP. See Ext-Group-User Accounts on page 583
information about this type.
This is the default lease time in minutes for each type of user account. It defines
the number of minutes the user has to renew the current session before the user
is logged out.
Admin users renew the session every time the main screen refreshes in the Web
Configurator. Access users can renew the session by clicking the Renew button
on their screen. If you allow access users to renew time automatically (see
Section 34.2.4 on page 589), the users can select this check box on their screen
as well. In this case, the session is automatically renewed before the lease time
expires.
This is the default reauthentication time in minutes for each type of user
account. It defines the number of minutes the user can be logged into the Zyxel
Device in one session before having to log in again. Unlike Lease Time, the user
has no opportunity to renew the session without logging out.
Select this check box if access users can renew lease time automatically, as well
as manually, simply by selecting the Updating lease time automatically check
box on their screen.
This is applicable for access users.
Select this check box if you want the Zyxel Device to monitor how long each
access user is logged in and idle (in other words, there is no traffic for this access
user). The Zyxel Device automatically logs out the access user once the User idle
timeout has been reached.
This is applicable for access users.
This field is effective when Enable user idle detection is checked. Type the
number of minutes each access user can be logged in and idle before the Zyxel
Device automatically logs out the access user.
Enter how often users must change their password when they log into the Zyxel
Device. You can choose from once a day to once a year.
Associate the password expiration to a specific Zyxel Device. Default is this Zyxel
Device (myrouter) or select Custom and enter the IP address or Fully Qualified
Domain Name (FQDN).
Select this to enforce the following conditions in a user password. Requiring a
strong password is good for security. The conditions are that the password must
consist of at least 8 characters and at most 64. At least 1 character must be a
number, at least 1 a lower case letter, at least 1 an upper case letter and at
least 1 a special character from the keyboard, such as !@#$%^&*()_+.
ZyWALL ATP Series User's Guide
591
Zyxel Device
's services but cannot look
for more information about this
for more