Asas; What You Can Do In This Chapter; What You Need To Know - ZyXEL Communications ISG50-ISDN User Manual

Chapter 48 AAA Server
user database that is limited to the memory capacity of the device. In essence, RADIUS
authentication allows you to validate a large number of users from a central location.
Figure 421 RADIUS Server Network Example

48.1.3 ASAS

ASAS (Authenex Strong Authentication System) is a RADIUS server that works with the One-Time
Password (OTP) feature. Purchase a ISG50 OTP package in order to use this feature. The package
contains server software and physical OTP tokens (PIN generators). Do the following to use OTP.
See the documentation included on the ASAS' CD for details.
Install the ASAS server software on a computer.
1
Create user accounts on the ISG50 and in the ASAS server.
2
Import each token's database file (located on the included CD) into the server.
3
Assign users to OTP tokens (on the ASAS server).
4
Configure the ASAS as a RADIUS server in the ISG50's Configuration > Object > AAA Server
5
screens.
Give the OTP tokens to (local or remote) users.
6

48.1.4 What You Can Do in this Chapter

• Use the Configuration > Object > AAA Server > Active Directory (or LDAP) screens
(Section 48.2 on page
• Use the Configuration > Object > AAA Server > RADIUS screen
to configure the default external RADIUS server to use for user authentication.

48.1.5 What You Need To Know

AAA Servers Supported by the ISG50
The following lists the types of authentication server the ISG50 supports.
• Local user database
The ISG50 uses the built-in local user database to authenticate administrative users logging into
the ISG50's Web Configurator or network access users logging into the network through the
ISG50. You can also use the local user database to authenticate VPN users.
632
634) to configure Active Directory or LDAP server objects.
(Section 48.3 on page 636)
ISG50 User's Guide