Chapter 56 Authentication Objects
ZyWALL Series CLI Reference Guide
490
56.5.4.1 Admin Access Two-Factor Command Example: Email
Follow the steps below to enable two-factor authentication for a Zyxel Device account. The example
uses the parameters below.
1 Create an admin account using the parameters given above.
2 Set an email for the account. Then verify the email.
3 Enable two-factor authentication for the admin account Mary.
4 Configure the two-factor authentication settings using the parameters given above.
5 Save the current configuration to the Zyxel Device.
56.5.4.2 Admin Access Two-Factor Command Example: QR Code
Please note that you need to add the QR code key generated by the Zyxel Device
(secret=XXXXXXXXXXX) manually to the Google Authenticator app after running show username
<USERNAME> google-auth qrcode.
Table 279 Admin Account Example
USER NAME PASSWORD USER TYPE
Mary 1234 admin
Table 280 Two-Factor Authentication Settings Example
AUTHENTICATION METHOD DELIVERY METHOD VALID TIME
pin code email 5 minutes
Router(config)# username Mary password 1234 user-type admin
Router(config)# username Mary email 1 abcd@zyxel.com.tw
Router(config)# username Mary email1-verify
Router(config)# two-factor-auth admin-access user Mary
Router(config)# username Mary 2fa-auth-method pin-code
Router(config)# two-factor-auth deliver-method email
Router(config)# two-factor-auth admin-access valid-time 5
Router(config)# write