If you choose to authenticate users with the on-board database, you must add user accounts for each client on a Gateway Enforcer appliance.

See Setting up user authentication with a local database.

You must be logged on the console of a Gateway Enforcer appliance as a superuser before you can execute this command.

See Logging on to an Enforcer appliance.

The on-demand local-db authentication add command uses the following syntax to add a user account to the on-board database that you set up on a Gateway Enforcer appliance.

on-demand authentication local-db add user username

where:

username represent a user account that you can add to the on-board database.

The following describes how to add to the local-db:

Enforcer# on-demand
Enforcer (on-demand)# authentication
Enforcer (authentication)# local-db add user jim

The on-demand local-db authentication enable command uses the following syntax to enable the on-board database that you can set up on a Gateway Enforcer appliance:

on-demand authentication local-db enable

The following example describes how to enable the local-db:

Enforcer# on-demand
Enforcer (on-demand)# authentication
Enforcer (authentication)# local-db enable

The on-demand local-db authentication disable command uses the following syntax to disable the on-board database that you set up on a Gateway Enforcer appliance:

on-demand authentication local-db disable

The following example describes how to disable the local-db:

Enforcer# on-demand
Enforcer (on-demand)# authentication
Enforcer (authentication)# local-db disable

The on-demand local-db authentication username commands let you add, delete, and edit user names:

local-db add username string password string
local-db delete username string
local-db edit username string password string
local-db enable |disable | clear

where:

The following example describes how to configure local database authentication for a Symantec Network Access Control On-Demand client on the console of a Gateway Enforcer appliance:

Enforcer# on-demand
Enforcer(on-demand)#authentication
Enforcer(authentication)# local-db disable
Local database authentication is disabled.

Enforcer(authentication)# local-db enable
Local database authentication is enabled.

Enforcer(authentication)# local add username test password test

Enforcer(authentication)# local-db delete username test
Your action will delete the user account "test" permanently.
  Please confirm. [Y/N]y

Enforcer(authentication)# local-db edit username test password b

Enforcer(authentication)# local-db clear
Notice that your action will remove ALL user account permanently!
  Please confirm. [Y/N]y