Choosing Your Networks' Authentication Method - LevelOne WHG-311 User Manual

The system provides SIP proxy functionality, which allows SIP clients to pass through NAT. When enabled, all SIP
traffic can pass through NAT via a fixed WAN interface. The policy route setting of SIP Authentication must be
configured carefully because it must cooperate with the fixed WAN interface for SIP authentication.
SIP Transparent Proxy can be activated in both NAT and Router mode. SIP Authentication must support in either
mode. For users logging in through SIP authentication, a group can be chosen to govern SIP traffic. The policy's
login schedule profile will be ignored for SIP authentication. Specific route and firewall rules of the chosen group will
be applied to SIP traffic.

6.1.8. Choosing Your Networks' Authentication method

For each Service Zone, network administrator can choose to enable or disable the need for authentication for that
Service Zone.
Go to: Main Menu > System > Service Zones
Disabling the need to authenticate means that all users accessing the network via this Service Zone will not need to
be authenticated before gaining access to the internet, however this way means that all users under this Service
Zone will not be able to be enforced with different policies.
Enabling the need to authenticate means that any user accessing this Service Zone will need to be authenticated
first before gaining access to the internet. The users' Group will be determined depending on which type of
authentication server this user belongs to and therefore different authentication server's users in the authentication
required Service Zone can be bounded with different policies as set in Service Zone – Group Mappings.
Suspending a Service Zone's need to authenticate means that no newly connected users are allowed to access this
Service Zone until it is configured back to either enabled or disabled by the network administrator.
85