USG FLEX 200H - missing 'ext-group-user' account type?

p4_greg

I have been following the progress on the new H series and I am happy to see Zyxel is working to bring back the wide feature set available in the older ZLD OS.

One feature that appears to be missing is the 'ext-group-user' account type. We would normally use this to limit the VPN users to a specific Active Directory group, for example.

The Online user manual even mentions 'ext-group-user' in the AAA Server 'Group Membership Attribute' section: The value for this attribute is called a group identifier; it determines to which group a user belongs. You can add ext-group-user user objects to identify groups based on these group identifier values.

Is it possible to create an ext-group-user account? If not, is there a timeframe when this feature might be added?

Zyxel_Melen

Hi @p4_greg,

Thanks for the screenshots. I have confirmed with my team that this user type is not supported in the current firmware version. I have helped create an idea post for you.

https://community.zyxel.com/en/discussion/27242/usg-flex-200h-missing-ext-group-user-account-type

Zyxel_Melen

Hi @p4_greg,

USG FLEX H supports ext-group-user attribute. You can see it is listed on the User's Guide.

Did you encounter any problems?

p4_greg

Hi Melen,

The issue I am having is I cannot create an ext-group-user 'object' on the FLEX200H.

-Older FLEX200 supports 5 different types of User Objects(Limited-admin, User, Guest, ext-user, ext-group-user)

-FLEX2000H seems to only support 2 types of User Objects(user, external)

See screenshots below.

Older FLEX200 showing the option to create an ext-group-user object

FLEX200H is missing the option to create an ext-group-user object

Zyxel_Melen

Hi @p4_greg,

Thanks for the screenshots. I have confirmed with my team that this user type is not supported in the current firmware version. I have helped create an idea post for you.

https://community.zyxel.com/en/discussion/27242/usg-flex-200h-missing-ext-group-user-account-type