ZyXEL Communications ZyWALL USG100-Plus User Manual page 91

Install the SafeWord 2008 authentication server software on a computer.
1
Create user accounts on the ZyWALL and in the SafeWord 2008 authentication server.
2
Import each ZyWALL OTPv2 token's database file (located on the included CD) into the server.
3
Assign users to ZyWALL OTPv2 tokens on the server.
4
Configure the SafeWord 2008 authentication server as a RADIUS server in the ZyWALL's
5
Configuration > Object > AAA Server screens.
Configure the appropriate authentication method object to use the SafeWord 2008 authentication
6
server RADIUS server object.
Configure Auth. Policy and VPN to use the authentication method object.
7
Give the ZyWALL OTPv2 tokens to the assigned users.
8
A user presses his ZyWALL OTPv2 token's button to generate a password to enter in the Login
9
screens' One-Time Password field.
4.7.1 What Can Go Wrong
• Users cannot log in if they try to re-use a password that they have already used to log in. Users
must generate a new password for each login.
• Authentication fails if the SafeWord 2008 authentication server goes down, loses its network
connection, or is too busy. Users can try again a little later.
ZyWALL USG100-PLUS User's Guide
Chapter 4 Create Secure Connections Across the Internet
91