mfa command

This command displays configuration and status of MFA global settings.

Use the mfa command to display and configure MFA global settings.

Syntax:

mfa [-options]

Table 1. mfa options
Option	Description	Values
-enforce	Enforce for all local users.	on, off Note The -enforce option will force MFA to be enabled for all local users.
-web	MFA method for WebGUI interface.	pat: password and totp.
-cli	MFA method for SSH CLI interface.	pat: password and totp pup: pubkey and password put: pubkey and totp
-totp digits	TOTP digits.	6, 8
-totp hash	TOTP Hash Algorithm.	sha1, sha256, sha384, sha512
-totp interval	TOTP Refreshing Interval in seconds. (readonly)
-totp window	The acceptable time difference between the server and client for OTP verification in seconds. (readonly)
-cd	Clear MFA settings and disable MFA for all users.

Example:

system> mfa
-enforce:  off
-web:  pat
-cli:  pat
-digits:  6
-hash:  sha256
-interval:  30
-window:  60

system> mfa -enforce on -web pat -cli pat -totp -digits 6 -hash sha256
ok
system> mfa
-enforce:  on
-web:  pat
-cli:  pat
-digits:  6
-hash:  sha256
-interval:  30
-window:  60

system> mfa -cd
ok

ส่งคำติชม