ZyXEL Communications ISG50 Network Router User Manual


 
Chapter 44 User/Group
ISG50 User’s Guide
603
The following table describes the labels in this screen.
Table 231 Configuration > User/Group > User > Add
LABEL DESCRIPTION
User Name Type the user name for this user account. You may use 1-31 alphanumeric
characters, underscores(
_), or dashes (-), but the first character cannot be a
number. This value is case-sensitive. User names have to be different than user
group names, and some words are reserved. See Section 44.2.1.1 on page
602.
User Type Select what type of user this is. Choices are:
admin - this user can look at and change the configuration of the ISG50
limited-admin - this user can look at the configuration of the ISG50 but
not to change it
user - this user has access to the ISG50’s services but cannot look at the
configuration
guest - this user has access to the ISG50’s services but cannot look at the
configuration
ext-user - this user account is maintained in a remote server, such as
RADIUS or LDAP. See Ext-User Accounts on page 600 for more information
about this type.
ext-group-user - this user account is maintained in a remote server, such
as RADIUS or LDAP. See Ext-Group-User Accounts on page 600 for more
information about this type.
Password This field is not available if you select the ext-user or ext-group-user type.
Enter the password of this user account. It can consist of 4 - 31 alphanumeric
characters.
Retype This field is not available if you select the ext-user or ext-group-user type.
Group Identifier This field is available for a ext-group-user type user account.
Specify the value of the AD or LDAP server’s Group Membership Attribute
that identifies the group to which this user belongs.
Associated AAA
Server Object
This field is available for a ext-group-user type user account. Select the AAA
server to use to authenticate this account’s users.
Description Enter the description of each user, if any. You can use up to 60 printable ASCII
characters. Default descriptions are provided.
Authentication
Timeout Settings
This field is not available if you select the ext-group-user type.
If you want to set authentication timeout to a value other than the default
settings, select Use Manual Settings then fill your preferred values in the
fields that follow.
Lease Time This field is not available if you select the ext-group-user type.
Enter the number of minutes this user has to renew the current session before
the user is logged out. You can specify 1 to 1440 minutes. You can enter 0 to
make the number of minutes unlimited. Admin users renew the session every
time the main screen refreshes in the Web Configurator. Access users can
renew the session by clicking the Renew button on their screen. If you allow
access users to renew time automatically (see Section 44.4 on page 605), the
users can select this check box on their screen as well. In this case, the session
is automatically renewed before the lease time expires.
Reauthentication
Time
This field is not available if you select the ext-group-user type.
Type the number of minutes this user can be logged into the ISG50 in one
session before the user has to log in again. You can specify 1 to 1440 minutes.
You can enter 0 to make the number of minutes unlimited. Unlike Lease Time,
the user has no opportunity to renew the session without logging out.
Configuration
Validation
Use a user account from the group specified above to test if the configuration is
correct. Enter the account’s user name in the User Name field and click Test.