Is it possible to setup an OpenVPN connection to a remote server, that stores a TOTP Google Authenticator code and inputs the correct numeric sequence during the connection handshake?
OPNSense OpenVPN Client w/ Seed Phrase ---> Remote Location with TOTP / Google Authenticator
I don't think that will be possible until you write a plugin for it ;)
Speak to the admin of the VPN server and see if you can use a static TLS shared key instead of TOTP. That offers the same security as you putting the seed on the VPN client rather than on a physically separate device.
Bart...