User manual ZYXEL ZYWALL USG CLI REFERENCE GUIDE

[. . . ] ZyWALL (ZLD) CLI Reference Guide Version 2. 11 6/2009 Edition 2 DEFAULT LOGIN User Name admin Password 1234 www. zyxel. com About This CLI Reference Guide About This CLI Reference Guide Intended Audience This manual is intended for people who want to configure ZLD-based ZyWALLs via Command Line Interface (CLI). You should have at least a basic knowledge of TCP/IP networking concepts and topology. Generally, it is organized by feature as outlined in the web configurator. This guide is intended as a command reference for a series of products. Therefore many commands or command options in this guide may not be available in your product. [. . . ] Sets the user name the ZyWALL uses to log into the default LDAP server. Enter the IP address (in dotted decimal notation) or the domain name of an LDAP server to add to this group. Sets the bind password (up to 15 characters). Sets the search timeout period (in seconds). The no command clears this setting and set this to the default setting of 5 seconds. Enables the ZyWALL to establish a secure connection to the LDAP server. Displays the specified LDAP server group settings. Sets a descriptive name for an LDAP server group. Use this command to enter the sub-command mode. The no command deletes the specified server group. Changes the descriptive name for an LDAP server group. [no] server cn-identifier uid [no] server host ldap_server [no] server password password [no] server port port_no [no] server search-time-limit time [no] server ssl ZyWALL (ZLD) CLI Reference Guide 233 Chapter 28 AAA Server 28. 2. 7 aaa group server radius Commands The following table lists the aaa group server radius commands you use to configure a group of RADIUS servers. Table 139 aaa group server radius Commands COMMAND clear aaa group server radius group-name DESCRIPTION Deletes all RADIUS server groups or the specified RADIUS server group. Note: You can NOT delete a server group that is currently in use. show aaa group server radius group-name [no] aaa group server radius group-name aaa group server radius rename {group-name-old} group-name-new aaa group server radius group-name [no] server host radius_server Sets the RADIUS server address. Enter the IP address (in dotted decimal notation) or the domain name of a RADIUS server to add to this server group. Sets a password (up to 15 alphanumeric characters) as the key to be shared between the RADIUS server(s) and the ZyWALL. Sets the search timeout period (in seconds). The no command clears this setting and set this to the default setting of 5 seconds. Displays the specified RADIUS server group settings. Sets a descriptive name for the RADIUS server group. The no command deletes the specified server group. Sets the server group name. [no] server key secret [no] server timeout time 28. 2. 8 aaa group server Command Example The following example creates a RADIUS server group with two members and sets the secret key to "12345678" and the timeout to 100 seconds. Router# configure terminal Router(config)# aaa group server radius RADIUSGroup1 Router(group-server-radius)# server host 192. 168. 1. 100 auth-port 1812 Router(group-server-radius)# server host 172. 23. 22. 100 auth-port 1812 Router(group-server-radius)# server key 12345678 Router(group-server-radius)# server timeout 100 Router(group-server-radius)# exit Router(config)# show aaa group server radius No. Name Reference ========================================================================== 1 RADIUSGroup1 0 Router(config)# 234 ZyWALL (ZLD) CLI Reference Guide CHAPTER 29 Authentication Objects This chapter shows you how to select different authentication methods for user authentication using the AAA servers or the internal user database. 29. 1 Authentication Objects Overview After you have created the AAA server objects, you can specify the authentication objects (containing the AAA server information) that the ZyWALL uses to authenticate users (using VPN or managing through HTTP/HTTPS). 29. 2 aaa authentication Commands The following table lists the aaa authentication commands you use to configure an authentication profile. Table 140 aaa authentication Commands COMMAND aaa authentication rename profile-name-old profilename-new clear aaa authentication profile-name DESCRIPTION Changes the profile name. profile-name: You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. Deletes all authentication profiles or the specified authentication profile. Note: You can NOT delete a profile that is currently in use. show aaa authentication {group-name|default} Displays the specified authentication server profile settings. ZyWALL (ZLD) CLI Reference Guide 235 Chapter 29 Authentication Objects Table 140 aaa authentication Commands (continued) COMMAND [no] aaa authentication {profile-name} aaa authentication profile-name[no] member1 [member2] [member3] DESCRIPTION Sets a descriptive name for the authentication profile. [. . . ] 167 unlock lockout-users ip | console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 upstream <0. . 1048576> . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 use-defined-mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 username rename username username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]