Aaa Server Overview; Directory Service (Ad/Ldap) - ZyXEL Communications USG40 User Manual

Table 322 Configuration > Schedule > Schedule Group > Add
LABEL
Member List
OK
Cancel

42.9 AAA Server Overview

You can use a AAA (Authentication, Authorization, Accounting) server to provide access control to
your network. The AAA server can be a Active Directory, LDAP, or RADIUS server. Use the AAA
Server screens to create and manage objects that contain settings for using AAA servers. You use
AAA server objects in configuring ext-group-user user objects and authentication method objects
(see Chapter 42 on page

42.9.1 Directory Service (AD/LDAP)

LDAP/AD allows a client (the ZyWALL/USG) to connect to a server to retrieve information from a
directory. A network example is shown next.
Figure 540 Example: Directory Service Client and Server
The following describes the user authentication procedure via an LDAP/AD server.
A user logs in with a user name and password pair.
1
The ZyWALL/USG tries to bind (or log in) to the LDAP/AD server.
2
When the binding process is successful, the ZyWALL/USG checks the user information in the
3
directory against the user name and password pair.
If it matches, the user is allowed access. Otherwise, access is blocked.
4
Chapter 42 Object
DESCRIPTION
The Member list displays the names of the service and service group objects
that have been added to the service group. The order of members is not
important.
Select items from the Available list that you want to be members and move
them to the Member list. You can double-click a single entry to move it or use
the [Shift] or [Ctrl] key to select multiple entries and use the arrow button to
move them.
Move any members you do not want included to the Available list.
Click OK to save your changes back to the ZyWALL/USG.
Click Cancel to exit this screen without saving your changes.
792).
ZyWALL/USG Series User's Guide
784