OpenVPN Client 2FA Prompt

[SamBGB]

My employer has decided to enforce 2FA on their OpenVPN Server.
With Pfsense I used to be able to do passwordOPT in the password field and that would work.

However I am thinking of moving to OpnSense and wondered if there is that same functionality?

[sopex]

Yes. https://docs.opnsense.org/manual/how-tos/sslvpn_instance_roadwarrior.html#:~:text=When%20users%20are%20also%20required%20to%20use%20a%20one%2Dtime%2Dpassword%2C%20just%20select%20an%20authentication%20server%20that%20supports%20the%20additional%20token.

[SamBGB]

Yes. https://docs.opnsense.org/manual/how-tos/sslvpn_instance_roadwarrior.html#:~:text=When%20users%20are%20also%20required%20to%20use%20a%20one%2Dtime%2Dpassword%2C%20just%20select%20an%20authentication%20server%20that%20supports%20the%20additional%20token.

This appears to be requesting users to the OPNSense VPN Server.

This is for a OPNSense OpenVPN client connection to a 3rd party server.

[sopex]

My bad, yes it will work.

[viragomann]

OPNsense has an implemented TOTP server out of the box.

Configure 2FA TOTP & Google Authenticator