Asas; What You Need To Know - ZyXEL Communications ZyWall ATP series User Manual

Figure 419 RADIUS Server Network Example

34.9.3 ASAS

ASAS (Authenex Strong Authentication System) is a RADIUS server that works with the One-Time Password
(OTP) feature. Purchase a Zyxel Device OTP package in order to use this feature. The package contains
server software and physical OTP tokens (PIN generators). Do the following to use OTP. See the
documentation included on the ASAS' CD for details.
Install the ASAS server software on a computer.
1
Create user accounts on the Zyxel Device and in the ASAS server.
2
Import each token's database file (located on the included CD) into the server.
3
Assign users to OTP tokens (on the ASAS server).
4
Configure the ASAS as a RADIUS server in the Zyxel Device's Configuration > Object > AAA Server
5
screens.
Give the OTP tokens to (local or remote) users.
6
• Use the Configuration > Object > AAA Server > Active Directory (or LDAP) screens
page 641) to configure Active Directory or LDAP server objects.
• Use the Configuration > Object > AAA Server > RADIUS screen
configure the default external RADIUS server to use for user authentication.

34.9.4 What You Need To Know

AAA Servers Supported by the Zyxel Device
The following lists the types of authentication server the Zyxel Device supports.
• Local user database
The Zyxel Device uses the built-in local user database to authenticate administrative users logging into
the Zyxel Device's Web Configurator or network access users logging into the network through the
Zyxel Device. You can also use the local user database to authenticate VPN users.
• Directory Service (LDAP/AD)
LDAP (Lightweight Directory Access Protocol)/AD (Active Directory) is a directory service that is both
a directory and a protocol for controlling access to a network. The directory consists of a database
specialized for fast information retrieval and filtering activities. You create and store user profile and
login information on the external server.
Chapter 34 Object
ZyWALL ATP Series User's Guide
639
(Section 34.9.5 on
(Section 34.9.2 on page 638) to