F3215-HP Load Balancing Module System Management Command Reference-6PW101

35
After you configure a fixed verification code for Web login, a Web user can use the code for login,
without caring about the verification code displayed on the login page. This feature is intended for test
environments where a script is usually used for Web function tests. Eliminating the requirement for
entering the verification code every time, this feature helps improve the test efficiency.
For Web access security, do not use this feature in production environments.
This command is not saved to the configuration file and cannot survive a reboot.
Examples
# Specify a fixed verification code for Web login
<Sysname> web captcha test
web https-authorization mode
Use web https-authorization mode to specify the authentication mode for users trying to log in to the
device through HTTPS.
Use undo web https-authorization mode to restore the default.
Syntax
web https-authorization mode { auto | manual }
undo web https-authorization mode
Default
A user must enter correct username and password to log in through HTTPS.
Views
System view
Default command level
2: System level
Parameters
auto: Uses the PKI certificates of HTTPS users to automatically authenticate them.
manual: Provides a login page for HTTPS users to enter the correct username and password.
Usage guidelines
When the auto mode is enabled:
If the PKI certificate of the user is correct and not expired, the CN field in the certificate is used as
the username to perform AAA authentication. If the authentication succeeds, the user automatically
enters the Web interface of the device.
If the PKI certificate of the user is correct and not expired, but the AAA authentication fails, the
device shows the Web login page. The user can log in to the device after entering correct username
and password.
When the PKI certificate of the user is incorrect or expired, the HTTPS connection is terminated.
Examples
# Specify the auto authentication mode for users trying to log in to the device through HTTPS.
<Sysname> system-view
[Sysname] web https-authorization mode auto