ZyXEL Communications ISG50 User Manual
Chapter 7 General Tutorials
ISG50 User’s Guide
117
example that does not include priorities for different types of traffic. See
for more on bandwidth management.
The users are authenticated by an external RADIUS server at 192.168.1.200.
First, set up the user accounts and user groups in the ISG50. Then, set up user authentication
using the RADIUS server. Finally, set up the policies in the table above.
using the RADIUS server. Finally, set up the policies in the table above.
The ISG50 has its default settings.
7.5.1 Set Up User Accounts
Set up one user account for each user account in the RADIUS server. If it is possible to export user
names from the RADIUS server to a text file, then you might create a script to create the user
accounts instead. This example uses the Web Configurator.
names from the RADIUS server to a text file, then you might create a script to create the user
accounts instead. This example uses the Web Configurator.
1
Click Configuration > Object > User/Group > User. Click the Add icon.
2
Enter the same user name that is used in the RADIUS server, and set the User Type to ext-user
because this user account is authenticated by an external server. Click OK.
because this user account is authenticated by an external server. Click OK.
Figure 86
Configuration > Object > User/Group > User > Add
3
Repeat this process to set up the remaining user accounts.
Table 18
User-aware Access Control Example
GROUP (USER)
WEB
SURFING
SURFING
WEB
BANDWIDTH
BANDWIDTH
MSN
LAN1-TO-DMZ
ACCESS
ACCESS
Finance (Leo)
Yes
200K
No
Yes
Engineer (Steven)
Yes
100K
No
No
Sales (Debbie)
Yes
100K
Yes (M-F, 08:30~18:00)
Yes
Boss (Andy)
Yes
100K
Yes
Yes
Guest (guest)
Yes
50K
No
No
Others
No
---
No
No