How To Configure User-Aware Access Control; How To Set Up User Accounts; How To Set Up User Groups; Figure 85 Object > User/Group > User > Add - ZyXEL Communications ZyWALL USG 100 Series User Manual

Chapter 6 Tutorials

6.5 How to Configure User-aware Access Control

You can configure many policies and security settings for specific users or groups of users.
This is illustrated in the following example, where you will set up the following policies. This
is a simple example that does not include priorities for different types of traffic. See
Bandwidth Management on page 454

Table 31 User-aware Access Control Example

GROUP (USER)
Finance (Leo)
Engineer (Steven) Yes
Sales (Debbie)
Boss (Andy)
Guest (guest)
Others
The users are authenticated by an external RADIUS server at 192.168.1.200.
First, set up the user accounts and user groups in the ZyWALL. Then, set up user
authentication using the RADIUS server. Finally, set up the policies in the table above.
The ZyWALL has its default settings.

6.5.1 How to Set Up User Accounts

Set up one user account for each user account in the RADIUS server. If it is possible to export
user names from the RADIUS server to a text file, then you might create a script to create the
user accounts instead. This example uses the web configurator.
1 Click Object > User/Group > User. Click the Add icon.
2 Enter the same user name that is used in the RADIUS server, and set the User Type to
Ext-User because this user account is authenticated by an external server. Click OK.
Figure 85 Object > User/Group > User > Add
3 Repeat this process to set up the remaining user accounts.

6.5.2 How to Set Up User Groups

Set up the user groups and assign the users to the user groups.
1 Click Object > User/Group > Group. Click the Add icon.
152
for more on bandwidth management.
WEB SURFING WEB
BANDWIDTH
Yes 200K
100K
Yes 100K
Yes 100K
Yes 50K
No ---
LAN1-TO-DMZ
MSN
ACCESS
No Yes
No No
Yes (M-F, 08:30~18:00) Yes
Yes Yes
No No
No No
ZyWALL USG 100/200 Series User's Guide