Chapter 42 Object
ZyWALL/USG Series User’s Guide
785
42.9.2 RADIUS Server
RADIUS (Remote Authentication Dial-In User Service) authentication is a popular protocol used to
authenticate users by means of an external server instead of (or in addition to) an internal device
user database that is limited to the memory capacity of the device. In essence, RADIUS
authentication allows you to validate a large number of users from a central location.
Figure 541 RADIUS Server Network Example
42.9.3 ASAS
ASAS (Authenex Strong Authentication System) is a RADIUS server that works with the One-Time
Password (OTP) feature. Purchase a ZyWALL/USG OTP package in order to use this feature. The
package contains server software and physical OTP tokens (PIN generators). Do the following to
use OTP. See the documentation included on the ASAS’ CD for details.
1 Install the ASAS server software on a computer.
2 Create user accounts on the ZyWALL/USG and in the ASAS server.
3 Import each token’s database file (located on the included CD) into the server.
4 Assign users to OTP tokens (on the ASAS server).
5 Configure the ASAS as a RADIUS server in the ZyWALL/USG’s Configuration > Object > AAA
Server screens.
6 Give the OTP tokens to (local or remote) users.
•Use the Configuration > Object > AAA Server > Active Directory (or LDAP) screens
(Section 42.9.5 on page 787) to configure Active Directory or LDAP server objects.
•Use the Configuration > Object > AAA Server > RADIUS screen (Section 42.9.2 on page
785) to configure the default external RADIUS server to use for user authentication.
42.9.4 What You Need To Know
AAA Servers Supported by the ZyWALL/USG
The following lists the types of authentication server the ZyWALL/USG supports.
To Next Page
Loading...
