Configuration Guide User guide

1896 FastIron Configuration Guide
53-1002494-02
Web authentication mode configuration
Syntax: [no] auth-mode username-password local-user-database <db-name>
For <db-name>, enter a valid local user database.
Use the no form of the command to remove the database from the Web Authentication VLAN.
Passcodes for user authentication
Web Authentication supports the use of passcodes to authenticate users. Users are blocked from
accessing the switch until they enter a valid passcode on a web login page. Unlike username and
password authentication, passcode authentication uses a simple number to authenticate users.
The simplicity of a passcode reduces user errors and lowers the overhead of supporting and
managing simple tasks, such as Internet access for guests and visitors in the office.
When passcodes are enabled, the system will automatically generate them every 1440 minutes
(24 hours), and when the system boots up. You can optionally create up to four static passcodes
which will be used in conjunction with the dynamic passcodes generated by the system.
Configuring passcode authentication
Follow the steps given below to configure the device to use the passcode authentication mode.
1. Optionally create up to four static passcodes
2. Enable passcode authentication
3. Configure other options
Creating static passcodes
Static passcodes can be used for troubleshooting purposes, or for networks that want to use
passcode authentication, but do not have the ability to support automatically-generated passcodes
(for example, the network does not fully support the use of SNMP traps or Syslog messages with
passcodes).
Manually-created passcodes are used in conjunction with dynamic passcodes . You can configure
up to four static passcodes that never expire. Unlike dynamically-created passcodes, static
passcodes are saved to flash memory. By default, there are no static passcodes configured on the
switch.
To create static passcodes, enter commands such as the following.
Brocade(config-vlan-10-webauth)#auth-mode passcode static 3267345
Brocade(config-vlan-10-webauth)#auth-mode passcode static 56127
Syntax: auth-mode passcode static <passcode>
For <passcode>, enter a number from 4 to 16 digits in length. You can create up to four static
passcodes, each with a different length. Static passcodes do not have to be the same length as
passcodes that are automatically generated.
After creating static passcodes, you can enable passcode authentication as described in the next
section.
To view the passcodes configured on the switch, use the show webauth vlan <vlan-id> passcode
command. Refer to “Displaying passcodes” on page 1920.