ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 179 / 426

ZyWALL / USG (ZLD) CLI Reference Guide
179
C
H A P T E R
2 6
Web Authentication
26.1 Web Authentication Overview
Web authentication can intercepts network traffic, according to the authentication policies, until the
user authenticates his or her connection, usually through a specifically designated login web page.
This means all web page requests can initially be redirected to a special web page that requires
users to authenticate their sessions. Once authentication is successful, they can then connect to the
rest of the network or Internet.
As soon as a user attempt to open a web page, the ZyWALL / USG reroutes his/her browser to a
web portal page that prompts he/she to log in.
26.2 Web Authentication Commands
This table lists the commands for forcing user authentication. You must use the
configure
terminal
command to enter the configuration mode before you can use these commands.
Table 94
web-auth Commands
COMMAND DESCRIPTION
[no] web-auth activate
Enables force user authentication that force users to log in to the ZyWALL /
USG before the ZyWALL / USG routes traffic for them. The no command
means the user authentication is not required.
web-auth default-rule authentication
{required | unnecessary} {no log | log
[alert]}
Sets the default authentication policy that the ZyWALL / USG uses on traffic
that does not match any exceptional service or other authentication policy.
required
: Users need to be authenticated. They must manually go to the
ZyWALL / USG’s login screen. The ZyWALL / USG will not redirect them to
the login screen.
unnecessary
: Users do not need to be authenticated.
no log | log [alert]
: Select whether to have the ZyWALL / USG
generate a log (
log
), log and alert (
log alert
) or not (
no log
) for packets
that match this default policy.
web-auth [no] exceptional-service
service_name
Sets a service which you want users to be able to access without user
authentication. The
no
command removes the specified service from the
exceptional list.
web-auth login setting
Sets the login web page through which the user authenticates his or her
connection before he or she can then connect to the rest of the network or
Internet. See
Table 95 on page 180 for the sub-commands.
web-auth method portal
Sets a client to authenticate with the ZyWALL / USG through the specifically
designated web portal.
web-auth policy <1..1024>
Creates the specified condition for forcing user authentication, if necessary,
and enters sub-command mode. The conditions are checked in sequence,
starting at 1. See
Table 95 on page 180 for the sub-commands.