ZyXEL Communications ZYWALL USG 1000 Support Notes page 219

We are going to complete the following setting.
1. Create a VLAN interface dedicated for wireless access
2. Define WLAN zones
3. Enable Force Authentication Page Redirect
4. Configure LDAP server information.
5. Configure WWW Authentication Method
6. Define user/group to have different kind of access granted
Step1. Create a VLAN interface dedicated for wireless access
In this example, all the employees or visitors can access Internet through wireless network.
For visitors, we want them to limit their access to Internet only while the employees can
access all including LAN/DMZ zones. Through packet with VLAN tag added, this will be
controlled by ZyWALL acting as a security guide which door(route) to open for packets
according to LDAP server's authentication.
1. Go to menu Network > Interface > VLAN.
2. Create a VLAN interface binds with interface ge5 for wireless network. Here, we define:
Interface name is vlan10 (same as the vlan tag id for its not being confusing).
Choose 'ge5' for physical port interface that we want to bind with.
Virtual VLAN Tag is 10.
Give it a clear description.
Use the fixed IP address with 192.168.10.1/24.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
219