How to set up web auth with AD server on USG FLEX H?

Zyxel_James

Question: How to set up web auth with AD server on USG FLEX H?

Answer:

Set Up a profile for AD server

Go to User & Authentication > User Authentication > AAA Server > AD. Click +Add tocreate a new profile

Enter the Server Address and port for Server settings. (10.214.48.XX:389 in this example).Enter the domain name and the credentials for logging into the AD server, and clickApply.

Join Domain

After the profile is created, go to System > DNS & DDNS > DNS, create a domain zoneforwarder, and configure the DNS server IP as the IP address for the domain controller

After the action above, go back to the profile page, tick it and click Join Domain

Enter NetBIOS Domain Name, Username and Password, click Apply.

After join domain successfully, you can see this icon.

Configure the Captive Portal

Enable the Captive Portal and add a policy - Navigate to the Web-GUI pathCaptive Portal > Authentication Policy > Policy > To enable the Captive Portalfunction and add a policy.

Add an Authentication Policy – Enable the Authentication Policy, provide aDescription, select the Incoming interface, choose the Sign In Method, specify theAuthentication Server and Portal Type, and enable Log.

Check the settings – Ensure the Captive Portal function and the AuthenticationPolicy are enabled.

Edit the Advance settings – The default server address is 6.6.6.6, the default HTTP portis set to 1080, and the default HTTPS port is set to 1443.