Chapter 31 Web Authentication
ZyWALL Series CLI Reference Guide
255
31.2.2 web-auth policy Sub-commands
The following table describes the sub-commands for an web-auth policy (web-auth policy 1-1024).
Note that not all rule commands use all the sub-commands listed here.
[no] logout-url url
Sets the logout page’s URL; for example, http://IIS server IP Address/
logout.html. You can use up to 255 characters (0-9a-zA-Z;/?:@&=+$\.-
_!~'()%,) in quotes.
The no command removes the URL.
The Internet Information Server (IIS) is the web server on which the web
portal files are installed.
[no] session-url url
Sets the session page’s URL; for example, http://IIS server IP Address/
session.html. You can use up to 255 characters (0-9a-zA-Z;/?:@&=+$\.-
_!~'()%,) in quotes.
The no command removes the URL.
The Internet Information Server (IIS) is the web server on which the web
portal files are installed.
[no] terms-of-service
Forces users to agree to the terms before they can use the service. An
agreement checkbox will display in the login page.
The no command allows users to use the service without agreeing to
the terms.
[no] welcome-url url
Sets the welcome page’s URL; for example, http://IIS server IP Address/
welcome.html. You can use up to 255 characters (0-9a-zA-Z;/
?:@&=+$\.-_!~'()%,) in quotes.
The no command removes the URL.
The Internet Information Server (IIS) is the web server on which the web
portal files are installed.
Table 129 web-auth login setting Sub-commands (continued)
COMMAND DESCRIPTION
Table 130 web-auth policy Sub-commands
COMMAND DESCRIPTION
[no] activate
Activates the specified condition. The no command deactivates the
specified condition.
[no] authentication
{force | required}
Selects the authentication requirement for users when their traffic matches
this policy. The no command means user authentication is not required.
force: Users need to be authenticated and the Zyxel Device automatically
display the login screen when users who have not logged in yet try to send
HTTP traffic.
required: Users need to be authenticated. They must manually go to the
login screen. The Zyxel Device will not redirect them to the login screen.
authentication-type
{<profile name> |
default-user-
agreement | default-
web-portal |
facebook-wifi}
Select the authentication type profile you want to use in this policy.
facebook-wifi is available when you enable Facebook Wi-Fi on the Zyxel
Device.
Note: If you set the authentication type to facebook-wifi, the
destination address must be any.
Note: You can configure the web-portal and user-agreement profile
using the web-auth type profile commands.