ZyXEL USG110/210/310 User Guide - Page 496

Chapter 20 Web Authentication Table 171 Configuration > Web Authentication > General > Add Authentication Policy (continued) LABEL DESCRIPTION Single Sign-on This field is available for user-configured policies that require Single Sign-On (SSO). Select this to have the Zyxel Device enable the SSO feature. You can set up this feature in the SSO screen. Force User Authentication This field is available for user-configured policies that require authentication. Select this to have the Zyxel Device automatically display the login screen when users who have not logged in yet try to send HTTP traffic. Authentication Type Select an authentication method: • default-web-portal: the default login page built into the Zyxel Device • default-user-agreement: the default user agreement page built into the Zyxel Device. OK Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving. 20.2.1 User-aware Access Control Example You can configure many policies and security settings for specific users or groups of users. Users can be authenticated locally by the Zyxel Device or by an external (RADIUS) authentication server. In this example the users are authenticated by an external RADIUS server at 172.16.1.200. First, set up the user accounts and user groups in the Zyxel Device. Then, set up user authentication using the RADIUS server. Finally, set up the policies in the table above. 20.2.1.1 Set Up User Accounts Set up user accounts in the RADIUS server. This example uses the Web Configurator. If you can export user names from the RADIUS server to a text file, then you might configure a script to create the user accounts instead. 1 Click Configuration > Object > User/Group > User. Click the Add icon. 2 Enter the same user name that is used in the RADIUS server, and set the User Type to ext-user because this user account is authenticated by an external server. Click OK. ZyWALL USG Series User's Guide 496