ZyXEL Communications ZyWALL USG 300 User Manual page 725

See Setting up User Attributes in an External Server on page 737
attributes and how to set up the attributes in an external server.
Ext-Group-User Accounts
Ext-Group-User accounts work are similar to ext-user accounts but allow you to
group users by the value of the group membership attribute configured for the AD
or LDAP server. See
membership attribute.
User Groups
User groups may consist of user accounts or other user groups. Use user groups
when you want to create the same rule for several user accounts, instead of
creating separate rules for each one.
Note: You cannot put access users and admin users in the same user group.
Note: You cannot put the default admin account into any user group.
The sequence of members in a user group is not important.
User Awareness
By default, users do not have to log into the Z yWALL to use the network services it
provides. The ZyWALL automatically routes packets for everyone. If you want to
restrict network services that certain users can use via the ZyWALL, you can
require them to log in to the ZyWALL first. The ZyWALL is then 'aware' of the user
who is logged in and you can create 'user-aware policies' that define what services
they can use. See
Finding Out More
• See Section 6.6.1 on page 112
• See Section 40.5 on page 737
external authentication server in order to log in.
• The ZyWALL supports TTLS using PAP so you can use the ZyWALL's local user
database to authenticate users with WPA or WPA2 instead of needing an
external RADIUS server. See
• See Section 7.7 on page 146
user groups as part of user-aware access control.
• See Section 7.8 on page 155
authenticate user accounts based on groups.
ZyWALL USG 300 User's Guide
Section 44.2.1 on page 761
Section 40.4.2 on page 736
for related information on these screens.
for some information on users who use an
Section 7.4 on page 125
for an example of configuring user accounts and
for an example of how to use a RADIUS server to
Chapter 40 User/Group
for a list of
for more on the group
for a user-aware login example.
for an example.
725