ZyXEL Communications ISG50 User Manual

Chapter 48 AAA Server

ISG50 User’s Guide

A bind DN is used to authenticate with an LDAP/AD server. For example a bind DN of 
cn=ISG50Admin

 allows the ISG50 to log into the LDAP/AD server using the user name of 

ISG50Admin

. The bind DN is used in conjunction with a bind password. When a bind DN is not 

specified, the ISG50 will try to log in as an anonymous user. If the bind password is incorrect, the 
login will fail.

• See 

 for an example of how to set up user authentication using a 

radius server.

• See 

 for an example of how to use a RADIUS server to authenticate user 

accounts based on groups. 

Use the Active Directory or LDAP screen to manage the list of AD or LDAP servers the ISG50 can 
use in authenticating users. 

Click Configuration > Object > AAA Server > Active Directory (or LDAP) to display the 
Active Directory (or LDAP) screen. 

Configuration > Object > AAA Server > Active Directory (or LDAP)  

The following table describes the labels in this screen. 

Configuration > Object > AAA Server > Active Directory (or LDAP) 

Add

Click this to create a new entry.

Edit

Double-click an entry or select it and click Edit to open a screen where you can 
modify the entry’s settings. 

Remove

To remove an entry, select it and click Remove. The ISG50 confirms you want to 
remove it before doing so.

Object 
References

Select an entry and click Object References to open a screen that shows which 
settings use the entry. See 

 for an example.

#

This field displays the index number. 

Name

This is the name of the AD or LDAP server entry.

Server Address

This is the address of the AD or LDAP server.

Base DN

This specifies a directory. For example, 

o=ZyXEL, c=US

.