Chapter 23 User/Group
ZyWALL (ZLD) CLI Reference Guide
175
23.2.5 Additional User Commands
This table lists additional commands for users.
force-auth policy insert <1..1024> Creates a new condition for forcing user
authentication at the specified location, renumbers
the other conditions accordingly, and enters sub-
command mode.
[no] activate Activates the specified condition. The
no
command deactivates the specified condition.
[no] description description Sets the description for the specified condition. The
no command clears the description.
description: You can use alphanumeric and
()+/:=?!*#@$_%- characters, and it can be up
to 60 characters long.
[no] destination {address_object |
group_name}
Sets the destination criteria for the specified
condition. The no command removes the
destination criteria, making the condition effective
for all destinations.
[no] force Forces users to log in to the ZyWALL if the
specified condition is satisfied. The
no command
means that users do not log in to the ZyWALL.
[no] schedule schedule_name Sets the time criteria for the specified condition.
The no command removes the time criteria,
making the condition effective all the time.
[no] source {address_object | group_name} Sets the source criteria for the specified condition.
The no command removes the source criteria,
making the condition effective for all sources.
show Displays information about the specified condition.
force-auth policy delete <1..1024> Deletes the specified condition.
force-auth policy flush Deletes every condition.
force-auth policy move <1..1024> to <1..1024> Moves the specified condition to the specified
location and renumbers the other conditions
accordingly.
show force-auth policy { <1..1024> | all } Displays details about the policies for forcing user
authentication.
Table 101 username/groupname Commands Summary: Forcing User Authentication (continued)
COMMAND DESCRIPTION
Table 102 username/groupname Commands Summary: Additional
COMMAND DESCRIPTION
show users {username | all | current} Displays information about the users logged onto
the system.
show lockout-users Displays users who are currently locked out.
unlock lockout-users ip | console Unlocks the specified IP address.
users force-logout ip | username Logs out the specified logins.