Web Authentication; Chapter 26 Web Authentication; Web Authentication Overview; Web Authentication Commands - ZyXEL Communications ZYWALL USG Series Reference Manual

26.1 Web Authentication Overview

Web authentication can intercepts network traffic, according to the authentication policies, until the
user authenticates his or her connection, usually through a specifically designated login web page.
This means all web page requests can initially be redirected to a special web page that requires
users to authenticate their sessions. Once authentication is successful, they can then connect to the
rest of the network or Internet.
As soon as a user attempt to open a web page, the ZyWALL / USG reroutes his/her browser to a
web portal page that prompts he/she to log in.

26.2 Web Authentication Commands

This table lists the commands for forcing user authentication. You must use the
command to enter the configuration mode before you can use these commands.
terminal
Table 94 web-auth Commands
COMMAND
[no] web-auth activate
web-auth default-rule authentication
{required | unnecessary} {no log | log
[alert]}
web-auth [no] exceptional-service
service_name
web-auth login setting
web-auth method portal
web-auth policy <1..1024>
ZyWALL / USG (ZLD) CLI Reference Guide
C
HAPTER

Web Authentication

DESCRIPTION
Enables force user authentication that force users to log in to the ZyWALL /
USG before the ZyWALL / USG routes traffic for them. The no command
means the user authentication is not required.
Sets the default authentication policy that the ZyWALL / USG uses on traffic
that does not match any exceptional service or other authentication policy.
required: Users need to be authenticated. They must manually go to the
ZyWALL / USG's login screen. The ZyWALL / USG will not redirect them to
the login screen.
unnecessary: Users do not need to be authenticated.
no log | log [alert]: Select whether to have the ZyWALL / USG
generate a log (log), log and alert (log alert) or not (no log) for packets
that match this default policy.
Sets a service which you want users to be able to access without user
authentication. The command removes the specified service from the
no
exceptional list.
Sets the login web page through which the user authenticates his or her
connection before he or she can then connect to the rest of the network or
Internet. See Table 95 on page 180
Sets a client to authenticate with the ZyWALL / USG through the specifically
designated web portal.
Creates the specified condition for forcing user authentication, if necessary,
and enters sub-command mode. The conditions are checked in sequence,
starting at 1. See Table 95 on page 180
2 6
configure
for the sub-commands.
for the sub-commands.
179