Figure 369 Ldap Example: Keywords For User Attributes; Table 156 Ldap/Radius: Keywords For User Attributes; Ext-User Accounts - ZyXEL Communications Unified Security Gateway ZyWALL 300 User Manual

Chapter 34 User/Group

34.1.2 Ext-User Accounts

Set up an Ext-User account if the user is authenticated by an external server and you want to
set up specific policies for this user in the ZyWALL. If you do not want to set up policies for
this user, you do not have to set up an Ext-User account.
Ext-User users should be authenticated by an external server, such as LDAP or RADIUS. If
the ZyWALL tries to use the local database to authenticate an Ext-User, the authentication
attempt always fails. (This is related to AAA servers and authentication methods, which are
discussed in
If the ZyWALL tries to authenticate an Ext-User using the local database, the
attempt always fails.
Once an Ext-User user has been authenticated, the ZyWALL tries to get the user type (see
Table 155 on page
information, the ZyWALL sets the user type for this session to User.
For the rest of the user attributes, such as reauthentication time, the ZyWALL checks the
following places, in order.
1 User account in the remote server.
2 User account (Ext-User) in the ZyWALL.
3 Default user account for LDAP users (ldap-users) or RADIUS users (radius-users) in
the ZyWALL.
See Section 34.1.2.1 on page 504
external server.
34.1.2.1 Setting up User Attributes in an External Server
To set up user attributes, such as reauthentication time, in LDAP or RADIUS servers, use the
following keywords in the user configuration file.

Table 156 LDAP/RADIUS: Keywords for User Attributes

KEYWORD
type
leaseTime
reauthTime
The following examples show you how you might set up user attributes in LDAP and
RADIUS servers.

Figure 369 LDAP Example: Keywords for User Attributes

type: admin
leaseTime: 99
reauthTime: 199
504
Chapter 38 on page 531 and
503) from the external server. If the external server does not have the
for a list of attributes and how to set up the attributes in an
CORRESPONDING ATTRIBUTE IN WEB CONFIGURATOR
User Type. Possible Values: admin, limited-admin, user, guest.
Lease Time. Possible Values: 1-1440 (minutes).
Reauthentication Time. Possible Values: 1-1440 (minutes).
Chapter 39 on page 541, respectively.)
ZyWALL USG 300 User's Guide