ZyXEL Communications ZyWall USG 50-H Series, User Manual

Page: 485 / 704

ZyWALL USG 50-H User’s Guide
485
C
H A P T E R
3 3
Authentication Method
33.1 Overview
Authentication method objects set how the ZyWALL authenticates HTTP/HTTPS clients,
peer IPSec routers (extended authentication), L2TP VPN, and wireless clients. Configure
authentication method objects to have the ZyWALL use the local user database, and/or the
authentication servers and authentication server groups specified by AAA server objects. By
default, user accounts created and stored on the ZyWALL are authenticated locally.
33.1.1 What You Can Do Using The Auth. Method Screens
• Use the Object > Auth. Method screen ( Section 33.2 on page 486 ) to view authentication
method objects.
• Use the Object > Auth. Method > Add screen ( Section 33.3 on page 487 ) to create a new
authentication method object.
Finding Out More
See Section 6.6.3 on page 115 for an example of how to set up user authentication using a
radius server.
33.1.2 Before You Begin
Configure AAA server objects (see Chapter 32 on page 475 ) before you configure
authentication method objects.
33.1.3 Example: Selecting a VPN Authentication Method
After you set up an authentication method object in the Auth. Method screens, you can use it
in the VPN Gateway screen to authenticate VPN users for establishing a VPN connection.
Refer to the chapter on VPN for more information.
Follow the steps below to specify the authentication method for a VPN connection.
1 Access the VPN > IPSec VPN > VPN Gateway > Edit screen.
2
Select Enable Extended Authentication .
3 Select Server Mode and select an authentication method object from the drop-down list
box.
4 Click OK to save the settings.