Passa al contenuto principale

mfa command

This command displays configuration and status of MFA global settings.

Use the mfa command to display and configure MFA global settings.

Syntax:
mfa [-options]
Table 1. mfa options
OptionDescriptionValues
-enforceEnforce for all local users.on, off
Note
The -enforce option will force MFA to be enabled for all local users.
-webMFA method for WebGUI interface.pat: password and totp.
-cliMFA method for SSH CLI interface.

  • pat: password and totp

  • pup: pubkey and password

  • put: pubkey and totp

-totp digits TOTP digits.6, 8
-totp hash TOTP Hash Algorithm.sha1, sha256, sha384, sha512
-totp interval TOTP Refreshing Interval in seconds. (readonly) 
-totp window The acceptable time difference between the server and client for OTP verification in seconds. (readonly) 
-cdClear MFA settings and disable MFA for all users. 
Example:
system> mfa
-enforce:  off
-web:  pat
-cli:  pat
-digits:  6
-hash:  sha256
-interval:  30
-window:  60

system> mfa -enforce on -web pat -cli pat -totp -digits 6 -hash sha256
ok
system> mfa
-enforce:  on
-web:  pat
-cli:  pat
-digits:  6
-hash:  sha256
-interval:  30
-window:  60

system> mfa -cd
ok