How To Use A Radius Server To Authenticate User Accounts Based On Groups - ZyXEL Communications ISG50-ISDN User Manual

Chapter 7 General Tutorials
Figure 90 Configuration > Object > User/Group > Setting > Add (Force User Authentication Policy)
When the users try to browse the web (or use any HTTP/HTTPS application), the Login screen
appears. They have to log in using the user name and password in the RADIUS server.
7.6 How to Use a RADIUS Server to Authenticate User
Accounts Based on Groups
The previous example showed how to have a RADIUS server authenticate individual user accounts.
If the RADIUS server has different user groups distinguished by the value of a specific attribute,
you can configure the make a couple of slight changes in the configuration to have the RADIUS
server authenticate groups of user accounts defined in the RADIUS server.
Click Configuration > Object > AAA Server > RADIUS. Double-click the radius entry. Besides
1
configuring the RADIUS server's address, authentication port, and key; set the Group
Membership Attribute field to the attribute that the ISG50 is to check to determine to which
group a user belongs. This example uses Class. This attribute's value is called a group identifier; it
determines to which group a user belongs. In this example the values are Finance, Engineer, Sales,
and Boss.
120
ISG50 User's Guide