ZyXEL Communications ZyWall USG 300 User Manual page 716

Chapter 40 User/Group
Table 191 Types of User Accounts (continued)
TYPE
limited-admin
Access Users
user
guest
ext-user
ext-group-user External group user account
Note: The default admin account is always authenticated locally, regardless of the
authentication method setting. (See
information about authentication methods.)
Ext-User Accounts
Set up an ext-user account if the user is authenticated by an external server and
you want to set up specific policies for this user in the ZyWALL. If you do not want
to set up policies for this user, you do not have to set up an ext-user account.
All ext-user users should be authenticated by an external server, such as AD,
LDAP or RADIUS. If the ZyWALL tries to use the local database to authenticate an
ext-user, the authentication attempt always fails. (This is related to AAA servers
and authentication methods, which are discussed in
Chapter 45 on page
Note: If the ZyWALL tries to authenticate an
attempt always fails.
Once an ext-user user has been authenticated, the ZyWALL tries to get the user
type (see
does not have the information, the ZyWALL sets the user type for this session to
User.
For the rest of the user attributes, such as reauthentication time, the ZyWALL
checks the following places, in order.
User account in the remote server.
1
User account (Ext-User) in the ZyWALL.
2
Default user account for AD users (ad-users), LDAP users (ldap-users) or
3
RADIUS users (radius-users) in the ZyWALL.
716
ABILITIES
Look at ZyWALL configuration (web, CLI)
Perform basic diagnostics (CLI)
Access network services
Browse user-mode commands (CLI)
Access network services
External user account
759, respectively.)
Table 191 on page 715) from the external server. If the external server
LOGIN METHOD(S)
WWW, TELNET, SSH, Console,
Dial-in
WWW, TELNET, SSH
WWW
WWW
WWW
Chapter 44 on page 749
Chapter 44 on page 749
ext-user
using the local database, the
ZyWALL USG 300 User's Guide
for more
and