How to disable TOTP for a Local User with admin privileges via CLI.

Description

The Time-Based One Time Password is a multi-factor authentication scheme that enables third party integration to generate secure time-based OTP via third party authentication Apps such as Google authenticator, Microsoft authenticator, Duo, Free-OTP, etc.


In this article, we will see how to unbind TOTP for an admin user via CLI (Command Line Interface)

Cause

Sometimes there would be issues sending TOTP to the destined 3rd party applications, with unbinding or time/time zone are not in sync. Because of which, user will not be able to access the SonicWALL GUI without the TOTP.

Resolution

1. Log in to the SonicWall appliance via SSH or console port using your Local user account with administrator privileges. You may use a terminal application like putty to access the CLI.

2. Enter the configuration mode by typing “configure”, hit enter.

   “config(18B1690******) #”

3. Then type “User local” and click on enter.

  “(Config-user-local) #”

4. Then type “user” and hit on Tab.

    You will get to see all the local users configured on the firewall.

5. Then, choose the user from the several user options and type “user username”,

   “(Config-user-local) # user test”, then click on enter.

 6. Once you reach this place, type “No” and hit on tab to type “one-time-password”.

    “(Edit-local-user[test]) # no

     (Edit-local-user[test]) # no one-time-password”, click on enter.

7. Type “commit” and enter for the changes to take place.


Image

 

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?