Example: Customizing a Firewall Authentication Banner

This example shows how to customize the banner text that appears in the browser.

Requirements

Before you begin, create an access profile.

Overview

A banner is a message that appears on a monitor in different places depending on the type of login. This example shows how to change the banner that appears in the browser to indicate that a user has successfully authenticated after successfully logging in through Web authentication. The new message is “Web authentication is successful.” If the authentication fails, then the new message reads “Authentication failed.”

Configuration

CLI Quick Configuration

To quickly customize the banner text that appears in the browser, copy the following commands and paste them into the CLI:

[edit]

set access firewall-authentication pass-through
default-profile Profile-1

set access firewall-authentication pass-through
ftp banner fail “ Authentication failed”

set access firewall-authentication web-authentication
default-profile Profile-1

set access firewall-authentication web-authentication
banner success “ Web authentication is successful”

Step-by-Step Procedure

The following example requires you to navigate various levels in the configuration hierarchy. For instructions on how to do that, see Using the CLI Editor in Configuration Mode.

To customize the banner text that appears in the browser:

Specify the banner text for failed pass-through authentication through FTP.
[edit]
user@host# set access firewall-authentication pass-through default-profile Profile-1
user@host# set access firewall-authentication pass-through ftp banner fail “ Authentication failed”
Specify the banner text for successful Web authentication.
[edit]
user@host# set access web-authentication default-profile Profile-1
user@host# set access web-authentication banner success “ Web authentication is successful”

Results

From configuration mode, confirm your configuration by entering the show access firewall-authentication command. If the output does not display the intended configuration, repeat the configuration instructions in this example to correct it.

user@host# show access firewall-authentication

pass-through {
    default-profile Profile-1;
    ftp {
        banner {
            fail "Authentication failed";
        }
    }
}
web-authentication {
    default-profile Profile-1;
    banner {
        success "Web authentication is successful";
    }
}

If you are done configuring the device, enter commit from configuration mode.

Verification

To confirm that the configuration is working properly, perform these tasks:

Troubleshooting with Logs

Troubleshooting with Logs

Purpose

Use these logs to identify any issues.

Action

From operational mode, enter the show log messages command and the show log dcd command.