Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 292

Multi-Factor Authentication Dell Networking switches support multi-factor authentication (MFA) for device users using local authentication method. In addition to the password, users must enter a second factor authentication code, a secret code that is received using email. The authentication module generates a secret code and sends it by an email configured for the user trying to authenticate. The second factor authentication is enforced only for users configured to be authenticated locally. Configuration commands allow the administrator to enable or disable the MFA feature on a per-user level. The administrator can configure the feature globally and control or override the global configuration for a specific user. The user configuration must exist before this feature is enabled for that user. Administrators need to add the users by configuring username, password, and privilege before configuring the mfa-enable and email id for the user. The email-id and mfa-enable values can be configured independently for a user. NOTE: This feature does not apply for clients authenticated by external servers. See the following sample configuration: console#config console(config)#mfa-enable console(config)#username testuser password s@mplePWD privilege 15 console(config)#username testuser mfa-enable email-id [email protected] console(config)# 292 Authentication, Authorization, and Accounting