What You Need To Know - ZyXEL Communications ZyWALL 1100 User Manual

package contains server software and physical OTP tokens (PIN generators). Do the following to
use OTP. See the documentation included on the ASAS' CD for details.
Install the ASAS server software on a computer.
1
Create user accounts on the ZyWALL/USG and in the ASAS server.
2
Import each token's database file (located on the included CD) into the server.
3
Assign users to OTP tokens (on the ASAS server).
4
Configure the ASAS as a RADIUS server in the ZyWALL/USG's Configuration > Object > AAA
5
Server screens.
Give the OTP tokens to (local or remote) users.
6
• Use the Configuration > Object > AAA Server > Active Directory (or LDAP) screens
(Section 33.8.5 on page
• Use the Configuration > Object > AAA Server > RADIUS screen
573) to configure the default external RADIUS server to use for user authentication.

33.8.4 What You Need To Know

AAA Servers Supported by the ZyWALL/USG
The following lists the types of authentication server the ZyWALL/USG supports.
• Local user database
The ZyWALL/USG uses the built-in local user database to authenticate administrative users
logging into the ZyWALL/USG's Web Configurator or network access users logging into the
network through the ZyWALL/USG. You can also use the local user database to authenticate VPN
users.
• Directory Service (LDAP/AD)
LDAP (Lightweight Directory Access Protocol)/AD (Active Directory) is a directory service that is
both a directory and a protocol for controlling access to a network. The directory consists of a
database specialized for fast information retrieval and filtering activities. You create and store
user profile and login information on the external server.
• RADIUS
RADIUS (Remote Authentication Dial-In User Service) authentication is a popular protocol used
to authenticate users by means of an external or built-in RADIUS server. RADIUS authentication
allows you to validate a large number of users from a central location.
Directory Structure
The directory entries are arranged in a hierarchical order much like a tree structure. Normally, the
directory structure reflects the geographical or organizational boundaries. The following figure
shows a basic directory structure branching from countries to organizations to organizational units
to individuals.
Chapter 33 Object
575) to configure Active Directory or LDAP server objects.
ZyWALL/USG Series User's Guide
574
(Section 33.8.2 on page