ZyXEL Communications USG40 - 42.2.1 What You Need To Know

Chapter 42 Object
ZyWALL/USG Series User’s Guide
726
•The Group screen (see Section 42.2.3 on page 731) provides a summary of all user groups. In
addition, this screen allows you to add, edit, and remove user groups. User groups may consist of
access users and other user groups. You cannot put admin users in user groups
•The Setting screen (see Section 42.2.4 on page 733) controls default settings, login settings,
lockout settings, and other user settings for the ZyWALL/USG. You can also use this screen to
specify when users must log in to the ZyWALL/USG before it routes traffic for them.
•The MAC Address screen (see Section 42.2.5 on page 737) allows you to configure the MAC
addresses or OUI (Organizationally Unique Identifier) of wireless clients for MAC authentication
using the local user database. The OUI is the first three octets in a MAC address and uniquely
identifies the manufacturer of a network device
.
42.2.1 What You Need To Know
User Account
A user account defines the privileges of a user logged into the ZyWALL/USG. User accounts are
used in security policies and application patrol, in addition to controlling access to configuration and
services in the ZyWALL/USG.
User Types
These are the types of user accounts the ZyWALL/USG uses.
Note: The default admin account is always authenticated locally, regardless of the
authentication method setting. (See Chapter 42 on page 792 for more information
about authentication methods.)
Ext-User Accounts
Set up an ext-user account if the user is authenticated by an external server and you want to set
up specific policies for this user in the ZyWALL/USG. If you do not want to set up policies for this
user, you do not have to set up an ext-user account.
Table 280 Types of User Accounts
TYPE ABILITIES LOGIN METHOD(S)
Admin Users
admin Change ZyWALL/USG configuration (web, CLI) WWW, TELNET, SSH, FTP, Console
limited-admin Look at ZyWALL/USG configuration (web, CLI)
Perform basic diagnostics (CLI)
WWW, TELNET, SSH, Console
Access Users
user Access network services
Browse user-mode commands (CLI)
WWW, TELNET, SSH
guest Access network services WWW
ext-user External user account WWW
ext-group-user External group user account WWW
guest-manager Create dynamic guest accounts WWW
dynamic-guest Access network services Hotspot Portal