Chapter 24 User/Group
NXC5200 User’s Guide
374
User Types
These are the types of user accounts the NXC uses.
Note: The default
admin
account is always authenticated locally, regardless of the
authentication method setting.
Ext-User Accounts
Set up an ext-user account if the user is authenticated by an external server and
you want to set up specific policies for this user in the NXC. If you do not want to
set up policies for this user, you do not have to set up an ext-user account.
All ext-user users should be authenticated by an external server, such as AD,
LDAP or RADIUS. If the NXC tries to use the local database to authenticate an
ext-user, the authentication attempt always fails.
Note: If the NXC tries to authenticate an
ext-user
using the local database, the
attempt always fails.
Once an ext-user user has been authenticated, the NXC tries to get the user type
from the external server. If the external server does not have the information, the
NXC sets the user type for this session to User.
Ext-Group-User Accounts
Ext-Group-User accounts work are similar to ext-user accounts but allow you to
group users by the value of the group membership attribute configured for the AD
or LDAP server.
Table 132
Types of User Accounts
TYPE
ABILITIES
LOGIN METHOD(S)
Admin Users
admin
Change NXC configuration (web, CLI)
WWW, TELNET, SSH, FTP,
Console, Dial-in
limited-admin
Look at NXC configuration (web, CLI)
Perform basic diagnostics (CLI)
WWW, TELNET, SSH, Console,
Dial-in
Access Users
user
Access network services
Browse user-mode commands (CLI)
Captive Portal, TELNET, SSH
guest
Access network services
Captive Portal
ext-user
External user account
Captive Portal
ext-group-user External group user account
Captive Portal