Service Control Rules - ZyXEL Communications UAG5100 User Manual

Table 194 Configuration > System > WWW > Service Control (continued)
LABEL
Admin/User Service
Control
Add
Edit
Remove
Move
#
Zone
Address
Action
Authentication
Client Authentication
Method
Apply
Reset

41.7.5 Service Control Rules

Click the Add icon or select an entry and click the Edit icon in the Service Control table in a
WWW, SSH, Telnet, FTP or SNMP screen to configure a service control rule.
Figure 272 Configuration > System > Service Control Rule > Add/Edit
Chapter 41 System
DESCRIPTION
Admin Service Control specifies from which zones an administrator can use HTTP to
manage the UAG (using the Web Configurator). You can also specify the IP addresses
from which the administrators can manage the UAG.
User Service Control specifies from which zones a user can use HTTP to log into the
UAG (to log into a web portal to access the Internet for example). You can also specify
the IP addresses from which the users can access the UAG.
Click this to create a new entry. Select an entry and click Add to create a new entry
after the selected entry.
Double-click an entry or select it and click Edit to be able to modify the entry's
settings.
To remove an entry, select it and click Remove. The UAG confirms you want to
remove it before doing so. Note that subsequent entries move up by one when you
take this action.
To change an entry's position in the numbered list, select the method and click Move
to display a field to type a number for where you want to put it and press [ENTER] to
move the rule to the number that you typed.
This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the UAG's (non-configurable)
default policy. The UAG applies this to traffic that does not match any other configured
rule. It is not an editable rule. To apply other behavior, configure a rule that traffic will
match so the UAG will not have to use the default policy.
This is the zone on the UAG the user is allowed or denied to access.
This is the object name of the IP address(es) with which the computer is allowed or
denied to access.
This displays whether the computer with the IP address specified above can access the
UAG zone(s) configured in the Zone field (Accept) or not (Deny).
Select a method the HTTPS or HTTP server uses to authenticate a client.
You must have configured the authentication methods in the Auth. method screen.
Click Apply to save your changes back to the UAG.
Click Reset to return the screen to its last-saved settings.
UAG5100 User's Guide
411