Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

To remove an entry, select it and click Remove. The ZyWALL confirms you want to remove it before doing so.

Object References

Select an entry and click Object References to open a screen that shows which settings use the entry.

Type the user name for this user account. You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. This value is case-sensitive. User names have to be different than user group names, and some words are reserved.

This field is not available if you select the ext-user or ext-group-user type.

Enter the password of this user account. It can consist of 4 - 31 alphanumeric characters.

This field is not available if you select the ext-user or ext-group-user type.

This field is available for a ext-group-user type user account.

Specify the value of the AD or LDAP server’s Group Membership Attribute that identifies the group to which this user belongs.

Associated AAA Server Object

This field is available for a ext-group-user type user account. Select the AAA server to use to authenticate this account’s users.

Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided.

Authentication Timeout Settings

If you want the system to use default settings, select Use Default Settings. If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow.

If you select Use Default Settings in the Authentication Timeout Settings field, the default lease time is shown.

If you select Use Manual Settings, you need to enter the number of minutes this user has to renew the current session before the user is logged out. You can specify 1 to 1440 minutes. You can enter 0 to make the number of minutes unlimited. Admin users renew the session every time the main screen refreshes in the Web Configurator. Access users can renew the session by clicking the Renew button on their screen. If you allow access users to renew time automatically , the users can select this check box on their screen as well. In this case, the session is automatically renewed before the lease time expires.

Reauthentication Time

If you select Use Default Settings in the Authentication Timeout Settings field, the default lease time is shown.

If you select Use Manual Settings, you need to type the number of minutes this user can be logged into the ZyWALL in one session before the user has to log in again. You can specify 1 to 1440 minutes. You can enter 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out.

Configuration Validation

Use a user account from the group specified above to test if the configuration is correct. Enter the account’s user name in the User Name field and click Test.

Click OK to save your changes back to the ZyWALL.

Click Cancel to exit this screen without saving your changes.

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

To remove an entry, select it and click Remove. The ZyWALL confirms you want to remove it before doing so. Removing a group does not remove the user accounts in the group.

Object References

Select an entry and click Object References to open a screen that shows which settings use the entry.

This field lists the members in the user group. Each member is separated by a comma.

Type the name for this user group. You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. This value is case-sensitive. User group names have to be different than user names.

Enter the description of the user group, if any. You can use up to 60 characters, punctuation marks, and spaces.

The Member list displays the names of the users and user groups that have been added to the user group. The order of members is not important. Select users and groups from the Available list that you want to be members of this group and move them to the Member list. You can double-click a single entry to move it or use the [Shift] or [Ctrl] key to select multiple entries and use the arrow button to move them.

Move any members you do not want included to the Available list.

Click OK to save your changes back to the ZyWALL.

Click Cancel to exit this screen without saving your changes.

Default Authentication Timeout Settings

These authentication timeout settings are used by default when you create a new user account. They also control the settings for any existing user accounts that are set to use the default settings. You can still manually configure any user account’s authentication timeout settings.

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

This field is a sequential value, and it is not associated with a specific entry.

This is the default lease time in minutes for each type of user account. It defines the number of minutes the user has to renew the current session before the user is logged out.

Admin users renew the session every time the main screen refreshes in the Web Configurator. Access users can renew the session by clicking the Renew button on their screen. If you allow access users to renew time automatically, the users can select this check box on their screen as well. In this case, the session is automatically renewed before the lease time expires.

This is the default reauthentication time in minutes for each type of user account. It defines the number of minutes the user can be logged into the ZyWALL in one session before having to log in again. Unlike Lease Time, the user has no opportunity to renew the session without logging out.

Select this check box if access users can renew lease time automatically, as well as manually, simply by selecting the Updating lease time automatically check box on their screen.

Select this check box if you want the ZyWALL to monitor how long each access user is logged in and idle (in other words, there is no traffic for this access user). The ZyWALL automatically logs out the access user once the User idle timeout has been reached.

This field is effective when Enable user idle detection is checked. Type the number of minutes each access user can be logged in and idle before the ZyWALL automatically logs out the access user.

Select this check box if you want to set a limit on the number of simultaneous logins by admin users. If you do not select this, admin users can login as many times as they want at the same time using the same or different IP addresses.

This field is effective when Limit ... for administration account is checked. Type the maximum number of simultaneous logins by each admin user.

Select this check box if you want to set a limit on the number of simultaneous logins by non-admin users. If you do not select this, access users can login as many times as they want as long as they use different IP addresses.

This field is effective when Limit ... for access account is checked. Type the maximum number of simultaneous logins by each access user.

Select this check box to set a limit on the number of times each user can login unsuccessfully (for example, wrong password) before the IP address is locked out for a specified amount of time.

This field is effective when Enable logon retry limit is checked. Type the maximum number of times each user can login unsuccessfully before the IP address is locked out for the specified lockout period. The number must be between 1 and 99.

This field is effective when Enable logon retry limit is checked. Type the number of minutes the user must wait to try to login again, if logon retry limit is enabled and the maximum retry count is reached. This number must be between 1 and 65,535 (about 45.5 days).

Click Apply to save the changes.

Click Reset to return the screen to its last-saved settings.

This read-only field identifies the type of user account for which you are configuring the default settings.

Enter the number of minutes this type of user account has to renew the current session before the user is logged out. You can specify 1 to 1440 minutes. You can enter 0 to make the number of minutes unlimited.

Admin users renew the session every time the main screen refreshes in the Web Configurator. Access users can renew the session by clicking the Renew button on their screen. If you allow access users to renew time automatically , the users can select this check box on their screen as well. In this case, the session is automatically renewed before the lease time expires.

Reauthentication Time

Type the number of minutes this type of user account can be logged into the ZyWALL in one session before the user has to log in again. You can specify 1 to 1440 minutes. You can enter 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out.

Click OK to save your changes back to the ZyWALL.

Click Cancel to exit this screen without saving your changes.

User-defined lease time (max ... minutes)

Access users can specify a lease time shorter than or equal to the one that you specified. The default value is the lease time that you specified.

Access users can click this button to reset the lease time, the amount of time remaining before the ZyWALL automatically logs them out. The ZyWALL sets this amount of time according to the

Updating lease time automatically

This box appears if you checked the Allow renewing lease time automatically box in the Setting screen. (See User/Group Setting.) Access users can select this check box to reset the lease time automatically 30 seconds before it expires. Otherwise, access users have to click the Renew button to reset the lease time.

Remaining time before lease timeout

This field displays the amount of lease time that remains, though the user might be able to reset it.

Remaining time before auth. timeout

This field displays the amount of time that remains before the ZyWALL automatically logs the access user out, regardless of the lease time.

User Type. Possible Values: admin, limited-admin, user, guest.

Lease Time. Possible Values: 1-1440 (minutes).

Reauthentication Time. Possible Values: 1-1440 (minutes).