HTML forms login policy commands

HTML forms login policy mode provides the commands to create or modify a forms login policy for the web application firewall.

To enter the mode, use the global forms-login-policy command. To delete a policy, use the no forms-login-policy command.

While in this mode, use the commands in the following table to modify the forms login policy for the web application firewall.

  • To view the current configuration, use the show command.
  • To restore default values, use the reset command.
  • To exit this configuration mode without saving changes to the running configuration, use the cancel command.
  • To exit this configuration mode and save changes to the running configuration, use the exit command.
Table 1. HTML forms login policy commands
Command Purpose
admin-state This command sets the administrative state for the configuration.
cookie-attributes This command sets the cookie attribute policy that allows predefined or custom attributes to be included in forms login cookie.
default-url This command specifies the URL fragment to go to after a successful login.
enable-migration This command indicates whether users must reauthenticate if their session moves to another member in the standby group if the current member becomes unavailable.
error-url This command sets the URL fragment of the error page on the application server.
forms-location This command sets the location of web pages.
inactivity-timeout This command sets the duration for an inactive session.
local-error-page This command specifies the location of the local error page.
local-login-page This command specifies the location of the local login page.
local-logout-page This command specifies the location of the local logout page.
login-url This command specifies the URL fragment of the login page on the application server.
logout-url This command specifies the URL fragment of the logout page on the application server.
password-field This command specifies the attribute value for the password field.
post-action-url This command specifies the processing URL fragment.
redirect-field This command specifies the attribute value for the hidden field that contains the target URL.
redirect-url-type This command specifies how to retrieve host information for HTTP URL-redirects.
script-location This command specifies the location of the custom file that generates the HTML pages and the login form.
session-lifetime This command sets the maximum duration to allow for a session before the user needs to reauthentication.
shared-secret This command identifies the shared secret that protects cookies.
ssl-port This command sets the port for secure transactions for the forms login policy.
summary This command specifies the brief, descriptive summary for the object instance.
support-type This command indicates whether to use static HTML pages or a custom file to generate the HTML pages.
use-cookie-attribute This command indicates whether to use a cookie attribute policy to allow predefined or custom attributes to be included in the forms login cookie.
use-ssl This command indicates whether to use TLS for login transactions.
username-field This command specifies the attribute value for the username field.