User manual ZYXEL ZYWALL USG 1000 CLI REFERENCE GUIDE

[. . . ] ZyWALL (ZLD) CLI Reference Guide Version 2. 00 7/2007 Edition 1 DEFAULT LOGIN LAN Port 1 IP Address http://192. 168. 1. 1 User Name admin Password 1234 www. zyxel. com About This User's Guide About This User's Guide This manual is designed to guide you through the configuration of your ZLD-based ZyWALL for its various applications using the CLI (Command Line Interface). Generally, it is organized by feature as outlined in the web configurator. See the web configurator User's Guide for related information on all features. Intended Audience This manual is intended for network administrators, or people who have a good knowledge of TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using the CLI. 1 Read Chapter 1 on page 13 for how to access and use the CLI (Command Line Interface). 2 Read Chapter 2 on page 29 to learn about the CLI user and privilege modes. [. . . ] Enter the IP address (in dotted decimal notation) or the domain name of an LDAP server to add to this group. Sets the bind password (up to 15 characters). Sets the search timeout period (in seconds). The no command clears this setting and set this to the default setting of 5 seconds. Enables the ZyWALL to establish a secure connection to the LDAP server. Displays the specified LDAP server group settings. Sets a descriptive name for an LDAP server group. Use this command to enter the sub-command mode. The no command deletes the specified server group. Changes the descriptive name for an LDAP server group. [no] server cn-identifier uid [no] server host ldap_server [no] server password password [no] server port port_no [no] server search-time-limit time [no] server ssl ZyWALL (ZLD) CLI Reference Guide 191 Chapter 27 AAA Server 27. 2. 7 aaa group server radius Commands The following table lists the aaa group server radius commands you use to configure a group of RADIUS servers. Table 116 aaa group server radius Commands COMMAND clear aaa group server radius group-name DESCRIPTION Deletes all RADIUS server groups or the specified RADIUS server group. Note: You can NOT delete a server group that is currently in use. show aaa group server radius group-name [no] aaa group server radius group-name aaa group server radius rename {group-name-old} group-name-new aaa group server radius group-name [no] server host radius_server Sets the RADIUS server address. Enter the IP address (in dotted decimal notation) or the domain name of a RADIUS server to add to this server group. Sets a password (up to 15 alphanumeric characters) as the key to be shared between the RADIUS server(s) and the ZyWALL. Sets the search timeout period (in seconds). The no command clears this setting and set this to the default setting of 5 seconds. Displays the specified RADIUS server group settings. Sets a descriptive name for the RADIUS server group. The no command deletes the specified server group. Sets the server group name. [no] server key secret [no] server timeout time 27. 2. 8 aaa group server Command Example The following example creates a RADIUS server group with two members and sets the secret key to "12345678" and the timeout to 100 seconds. Router# configure terminal Router(config)# aaa group server radius RADIUSGroup1 Router(group-server-radius)# server host 192. 168. 1. 100 auth-port 1812 Router(group-server-radius)# server host 172. 23. 22. 100 auth-port 1812 Router(group-server-radius)# server key 12345678 Router(group-server-radius)# server timeout 100 Router(group-server-radius)# exit Router(config)# show aaa group server radius No. Name Reference ========================================================================== 1 RADIUSGroup1 0 Router(config)# 192 ZyWALL (ZLD) CLI Reference Guide CHAPTER 28 Authentication Objects This chapter shows you how to select different authentication methods for user authentication using the AAA servers or the internal user database. 28. 1 Authentication Objects Overview After you have created the AAA server objects, you can specify the authentication objects (containing the AAA server information) that the ZyWALL uses to authenticate users (using VPN or managing through HTTP/HTTPS). 28. 2 aaa authentication Commands The following table lists the aaa authentication commands you use to configure an authentication profile. Table 117 aaa authentication Commands COMMAND aaa authentication rename profile-name-old profilename-new clear aaa authentication profile-name DESCRIPTION Changes the profile name. profile-name: You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. Deletes all authentication profiles or the specified authentication profile. Note: You can NOT delete a profile that is currently in use. show aaa authentication {group-name|default} Displays the specified authentication server profile settings. ZyWALL (ZLD) CLI Reference Guide 193 Chapter 28 Authentication Objects Table 117 aaa authentication Commands (continued) COMMAND [no] aaa authentication {profile-name} aaa authentication profile-name[no] member1 [member2] [member3] DESCRIPTION Sets a descriptive name for the authentication profile. Sets the profile to use the authentication method(s) in the order specified. [. . . ] 103 transform-set isakmp-algo [isakmp_algo [isakmp_algo]] . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 trigger append incoming service_name trigger service_name . . . . . . . . . . . . . . . . . . . . . . . . 70 trigger delete <1. . 8> . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 trigger insert <1. . 8> incoming service_name trigger service_name . . . . . . . . . . . . . . . . . [. . . ]