ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 180 / 426

Chapter 26 Web Authentication
ZyWALL / USG (ZLD) CLI Reference Guide
180
26.2.1 web-auth policy Sub-commands
The following table describes the sub-commands for several web-auth policy commands. Note that
not all rule commands use all the sub-commands listed here.
web-auth policy append
Creates a new condition for forcing user authentication at the end of the
current list and enters sub-command mode. See
Table 95 on page 180 for
the sub-commands.
web-auth policy insert <1..1024>
Creates a new condition for forcing user authentication at the specified
location, renumbers the other conditions accordingly, and enters sub-
command mode. See
Table 95 on page 180 for the sub-commands.
web-auth policy delete <1..1024>
Deletes the specified condition.
To modify a condition, you can insert a new condition (N) and then delete
the one (N+1) that you want to modify.
web-auth policy flush
Deletes every condition.
web-auth policy move <1..1024> to
<1..1024>
Moves the specified condition to the specified location and renumbers the
other conditions accordingly.
show web-auth activation
Displays whether forcing user authentication is enabled or not.
show web-auth default-rule
Displays settings of the default web authentication policy.
show web-auth exceptional-service
Displays services that users can access without user authentication.
show web-auth method
Displays whether a client is to authenticate with the ZyWALL / USG through
the specifically designated web portal when web authentication is enabled.
show web-auth policy {<1..1024> | all}
Displays details about the policies for forcing user authentication.
show web-auth portal status
Displays the web portal page settings.
show web-auth status
Displays the web portal page settings.
Table 94
web-auth Commands (continued)
COMMAND DESCRIPTION
Table 95
web-auth policy Sub-commands
COMMAND DESCRIPTION
[no] activate
Activates the specified condition. The
no
command deactivates the
specified condition.
[no] authentication {force |
required}
Selects the authentication requirement for users when their traffic matches
this policy. The
no
command means user authentication is not required.
force
: Users need to be authenticated and the ZyWALL / USG
automatically display the login screen when users who have not logged in
yet try to send HTTP traffic.
required
: Users need to be authenticated. They must manually go to the
login screen. The ZyWALL / USG will not redirect them to the login screen.
[no] description description
Sets the description for the specified condition. The
no
command clears the
description.
description
: You can use alphanumeric and
()+/:=?!*#@$_%-
characters, and it can be up to 60 printable ASCII characters long.
[no] destination { address_object |
group_name }
Sets the destination criteria for the specified condition. The
no
command
removes the destination criteria, making the condition effective for all
destinations.
[no] force
Forces users to log in to the ZyWALL / USG if the specified condition is
satisfied. The
no
command means that users do not log in to the ZyWALL /
USG.