Chapter 26 Web Authentication
ZyWALL / USG (ZLD) CLI Reference Guide
180
26.2.1 web-auth policy Sub-commands
The following table describes the sub-commands for several web-auth policy commands. Note that
not all rule commands use all the sub-commands listed here.
web-auth policy append Creates a new condition for forcing user authentication at the end of the
current list and enters sub-command mode. See Table 95 on page 180 for
the sub-commands.
web-auth policy insert <1..1024> Creates a new condition for forcing user authentication at the specified
location, renumbers the other conditions accordingly, and enters sub-
command mode. See Table 95 on page 180 for the sub-commands.
web-auth policy delete <1..1024> Deletes the specified condition.
To modify a condition, you can insert a new condition (N) and then delete
the one (N+1) that you want to modify.
web-auth policy flush Deletes every condition.
web-auth policy move <1..1024> to
<1..1024>
Moves the specified condition to the specified location and renumbers the
other conditions accordingly.
show web-auth activation Displays whether forcing user authentication is enabled or not.
show web-auth default-rule Displays settings of the default web authentication policy.
show web-auth exceptional-service Displays services that users can access without user authentication.
show web-auth method Displays whether a client is to authenticate with the ZyWALL / USG through
the specifically designated web portal when web authentication is enabled.
show web-auth policy {<1..1024> | all} Displays details about the policies for forcing user authentication.
show web-auth portal status Displays the web portal page settings.
show web-auth status Displays the web portal page settings.
Table 94 web-auth Commands (continued)
COMMAND DESCRIPTION
Table 95 web-auth policy Sub-commands
COMMAND DESCRIPTION
[no] activate Activates the specified condition. The no command deactivates the
specified condition.
[no] authentication {force |
required}
Selects the authentication requirement for users when their traffic matches
this policy. The no command means user authentication is not required.
force: Users need to be authenticated and the ZyWALL / USG
automatically display the login screen when users who have not logged in
yet try to send HTTP traffic.
required: Users need to be authenticated. They must manually go to the
login screen. The ZyWALL / USG will not redirect them to the login screen.
[no] description description Sets the description for the specified condition. The no command clears the
description.
description: You can use alphanumeric and
()+/:=?!*#@$_%-
characters, and it can be up to 60 printable ASCII characters long.
[no] destination {address_object |
group_name}
Sets the destination criteria for the specified condition. The
no command
removes the destination criteria, making the condition effective for all
destinations.
[no] force Forces users to log in to the ZyWALL / USG if the specified condition is
satisfied. The
no command means that users do not log in to the ZyWALL /
USG.
To Next Page
Loading...
