Chapter 31 User/Group
UAG4100 User’s Guide
301
User Type
These are the kinds of user account the UAG supports.
•
admin
- this user can look at and change the configuration of the UAG
•
limited-admin
- this user can look at the configuration of the UAG but not
to change it
•
ext-user
- this user account is maintained in a remote server, such as
RADIUS. See
for more information about
this type.
•
ext-group-user
- this user account is maintained in a remote server, such
as RADIUS. See
Ext-Group-User Accounts on page 293
for more
information about this type.
•
guest-manager
- this user can log in via the web configurator login screen
and create dynamic guest accounts using the
Account Generator
screen
that pops up.
•
pre-subscriber
- this user has access to the UAG’s services but cannot
look at the configuration.
Lease Time
This is the default lease time in minutes for each type of user account. It
defines the number of minutes the user has to renew the current session
before the user is logged out.
Admin users renew the session every time the main screen refreshes in the
Web Configurator. Access users can renew the session by clicking the
Renew
button on their screen. If you allow access users to renew time automatically
(see
), the users can select this check box on their
screen as well. In this case, the session is automatically renewed before the
lease time expires.
Reauthentication Time
This is the default reauthentication time in minutes for each type of user
account. It defines the number of minutes the user can be logged into the UAG
in one session before having to log in again. Unlike
Lease Time
, the user has
no opportunity to renew the session without logging out.
Miscellaneous Settings
Allow renewing lease
time automatically
Select this check box if access users can renew lease time automatically, as
well as manually, simply by selecting the
Updating lease time automatically
check box on their screen.
Enable user idle
detection
This is applicable for access users.
Select this check box if you want the UAG to monitor how long each access user
is logged in and idle (in other words, there is no traffic for this access user).
The UAG automatically logs out the access user once the
User idle timeout
has been reached.
User idle timeout
This is applicable for access users.
This field is effective when
Enable user idle detection
is checked. Type the
number of minutes each access user can be logged in and idle before the UAG
automatically logs out the access user.
User Logon Settings
Limit number of
simultaneous logons for
administration account
Select this check box if you want to set a limit on the number of simultaneous
logins by admin users. If you do not select this, admin users can log in as many
times as they want at the same time using the same or different IP addresses.
Maximum number per
administration account
This field is effective when
Limit number of simultaneous logons for
administration account
is checked. Type the maximum number of
simultaneous logins by each admin user.
Limit number of
simultaneous logons for
access account
Select this check box if you want to set a limit on the number of simultaneous
logins by non-admin users. If you do not select this, access users can log in as
many times as they want as long as they use different IP addresses.
Maximum number per
access account
This field is effective when
Limit number of simultaneous logons for
access account
is checked. Type the maximum number of simultaneous logins
by each access user.
Table 141
Configuration > Object > User/Group > Setting (continued)
LABEL
DESCRIPTION
