ZyXEL Communications UAG Series - Chapter 29 Payment Service; 29.2 Payment-service Commands

Chapter 29 Web Authentication
UAG CLI Reference Guide
161
29.2.2 web-auth policy Sub-commands
The following table describes the sub-commands for several web-auth policy commands. Note that
not all rule commands use all the sub-commands listed here.
[no] terms-of-service Forces users to agree to the terms before they can use the service. An agreement
checkbox will display in the login page.
The no command allows users to use the service without agreeing to the terms.
[no] welcome-url url Sets the welcome page’s URL; for example, http://IIS server IP Address/
welcome.html. You can use up to 255 characters (0-9a-zA-Z;/?:@&=+$\.-
_!~*'()%) in quotes.
The no command removes the URL.
The Internet Information Server (IIS) is the web server on which the web portal
files are installed.
Table 93 web-auth login setting Sub-commands (continued)
COMMAND DESCRIPTION
Table 94 web-auth policy Sub-commands
COMMAND DESCRIPTION
[no] activate Activates the specified condition. The no command deactivates the
specified condition.
[no] authentication {force |
required}
Selects the authentication requirement for users when their traffic matches
this policy. The no command means user authentication is not required.
force: Users need to be authenticated and the UAG automatically display
the login screen when users who have not logged in yet try to send HTTP
traffic.
required: Users need to be authenticated. They must manually go to the
login screen. The UAG will not redirect them to the login screen.
[no] description description Sets the description for the specified condition. The no command clears the
description.
description: You can use alphanumeric and
()+/:=?!*#@$_%-
characters, and it can be up to 60 printable ASCII characters long.
[no] destination {address_object |
group_name}
Sets the destination criteria for the specified condition. The
no command
removes the destination criteria, making the condition effective for all
destinations.
[no] eps <1..8> eps_object_name Associates the specified End Point Security (EPS) object with the specified
condition. The UAG checks authenticated users’ computers against the
condition’s endpoint security objects in the order of 1 to 8. You have to
configure order 1 and then the others if any. The no command removes the
specified EPS object’s association with the condition.
To apply EPS for this condition, you have to also make sure you enable EPS
and set authentication to either required or force for this condition.
[no] eps activate Enables EPS for the specified condition. The no command means to disable
EPS for the condition.
[no] eps periodical-check
<1..1440>
Sets a number of minutes the UAG has to repeat the endpoint security
check. The
no command means that the UAG only perform the endpoint
security check when users log in to the UAG.
[no] force Forces users to log in to the UAG if the specified condition is satisfied. The
no command means that users do not log in to the UAG.
interface interface_name Sets an interface on which packets for the policy must be received.