ZyXEL Communications NXC2500 User Manual page 170

Chapter 15 User/Group
Table 81 Types of User Accounts (continued)
TYPE
user
guest
ext-user
ext-group-user
guest-manager
dynamic guest
mac-address
Note: The default admin account is always authenticated locally, regardless of the
authentication method setting.
Ext-User Accounts
Set up an ext-user account if the user is authenticated by an external server and you want to set
up specific policies for this user in the NXC. If you do not want to set up policies for this user, you do
not have to set up an ext-user account.
All ext-user users should be authenticated by an external server, such as AD, LDAP or RADIUS. If
the NXC tries to use the local database to authenticate an ext-user, the authentication attempt
always fails.
Note: If the NXC tries to authenticate an ext-user using the local database, the attempt
always fails.
Once an ext-user user has been authenticated, the NXC tries to get the user type from the
external server. If the external server does not have the information, the NXC sets the user type for
this session to User.
Ext-Group-User Accounts
Ext-Group-User accounts work are similar to ext-user accounts but allow you to group users by
the value of the group membership attribute configured for the AD or LDAP server.
Ext-Server Accounts
Ext-Server accounts are admin accounts that can log into the NXC from the WAN and which are
authenticated by an associated RADIUS server.
Dynamic Guest Accounts
Dynamic guest accounts are guest accounts, but are created dynamically with the guest manager
account and stored in the NXC's local user database. A dynamic guest account has a dynamically-
created user name and password. A dynamic guest account user can access the NXC's services only
within a given period of time and will become invalid after the expiration date/time. You cannot
modify or edit a dynamic guest account.
170
ABILITIES
Access network services
Browse user-mode commands (CLI)
Access network services
External user account
External group user account
Create dynamic guest accounts
Access network services
As permitted by the user-aware feature
configuration.
LOGIN METHOD(S)
Captive Portal, TELNET, SSH
Captive Portal
Captive Portal
Captive Portal
WWW
Captive Portal
MAC Authentication
NXC2500 User's Guide