ZyXEL Communications ZyWall USG 50-H Series, User Manual

Page: 90 / 704

Chapter 5 Configuration Basics
ZyWALL USG 50-H User’s Guide
90
5.5.1 User/Group
Use these screens to configure the ZyWALL’s administrator and user accounts. The ZyWALL
provides the following user types.
If you want to force users to log in to the ZyWALL before the ZyWALL routes traffic for
them, you might have to configure prerequisites first.
5.6 System Management and Maintenance
This section introduces some of the management and maintenance features in the ZyWALL.
Use
Host Name to configure the system and domain name for the ZyWALL. Use Date/Time
to configure the current date, time, and time zone in the ZyWALL. Use Console Speed to set
the console speed. Use Language to select a language for the web configurator screens.
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP,
Use these screens to set which services or protocols can be used to access the ZyWALL
through which zone and from which addresses (address objects) the access can come.
Example: Suppose you want to allow an administrator to use HTTPS to manage the ZyWALL
from the WAN.
1
Create an administrator account ( User/Group ).
2 Create an address object for the administrator’s computer ( Object > Address ).
3
Click System > WWW to configure the HTTP management access. Enable HTTPS and
add an administrator service control entry.
• Select the address object for the administrator’s computer.
• Select the WAN zone.
• Set the action to Accept .
Table 28 User Types
TYPE ABILITIES
Admin Change ZyWALL configuration (web, CLI)
Limited-Admin Look at ZyWALL configuration (web)
User Access network services, browse user-mode commands (CLI)
Guest Access network services
Ext-User The same as a User or a Guest. The ZyWALL looks for the specific type in an
external authentication server. If the type is not available, the ZyWALL applies
default settings.
MENU ITEM(S)
Object > User/Group
PREREQUISITES
Addresses, address groups, schedules. The prerequisites are only used in
policies to force user authentication
WHERE USED
Policy routes, firewall, application patrol, user groups, VPN, WLAN
MENU ITEM(S)
System > DNS, WWW, SSH, TELNET, FTP, SNMP, Language
PREREQUISITES
To-ZyWALL firewall, zones, addresses, address groups, certificates (WWW,
SSH, FTP), authentication methods (WWW)