ZyXEL Communications NXC5200 User Manual page 481

Table 184 Configuration > System > WWW > Service Control (continued)
LABEL
Authenticate Client
Certificates
Server Certificate
Redirect HTTP to
HTTPS
Admin/User
Service Control
Add
Edit
Remove
Move
#
Zone
Address
Action
HTTP
Enable
Server Port
NXC5200 User's Guide
DESCRIPTION
Select Authenticate Client Certificates (optional) to require the
SSL client to authenticate itself to the NXC by sending the NXC a
certificate. To do that the SSL client must have a CA-signed
certificate from a CA that has been imported as a trusted CA on the
NXC.
Select a certificate the HTTPS server (the NXC) uses to authenticate
itself to the HTTPS client. You must have certificates already
configured in the My Certificates screen.
To allow only secure Web Configurator access, select this to redirect
all HTTP connection requests to the HTTPS server.
Admin Service Control specifies from which zones an administrator
can use HTTPS to manage the NXC (using the Web Configurator).
You can also specify the IP addresses from which the administrators
can manage the NXC.
User Service Control specifies from which zones a user can use
HTTPS to log into the NXC. You can also specify the IP addresses
from which the users can access the NXC.
Click this to create a new entry. Select an entry and click Add to
create a new entry after the selected entry.
Double-click an entry or select it and click Edit to be able to modify
the entry's settings.
To remove an entry, select it and click Remove. The NXC confirms
you want to remove it before doing so. Note that subsequent entries
move up by one when you take this action.
To change an entry's position in the numbered list, select the method
and click Move to display a field to type a number for where you
want to put it and press [ENTER] to move the rule to the number
that you typed.
This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the NXC's (non-
configurable) default policy. The NXC applies this to traffic that does
not match any other configured rule. It is not an editable rule. To
apply other behavior, configure a rule that traffic will match so the
NXC will not have to use the default policy.
This is the zone on the NXC the user is allowed or denied to access.
This is the object name of the IP address(es) with which the
computer is allowed or denied to access.
This displays whether the computer with the IP address specified
above can access the NXC zone(s) configured in the Zone field
(Accept) or not (Deny).
Select the check box to allow or disallow the computer with the IP
address that matches the IP address(es) in the Service Control
table to access the NXC Web Configurator using HTTP connections.
You may change the server port number for a service if needed,
however you must use the same port number in order to use that
service to access the NXC.
Chapter 33 System
481