IPSec MFA in Fedora 34

[rlanhellas]

Today I'm using Windows 10 to connect in my company VPN. This VPN use MFA in this way:

1. I enter user/pass 
2. I receive SMS or Answer a secret question.
3. I put sms code in checkpoint client , if I choose receive SMS.
4. I'm connected.

Now I'm migration to Fedora 34, and I didn't found a way to connect to my vpn using MFA, I tried some solutions like: snx cli, snxconnect in python, install checkpoint using wine. But unhappy nothing worked. 

Is possible using Fedora 34 (Linux in general) with MFA in Checkpoint VPN ? 

[PhoneBoy]

Your two options on Linux are SNX and StrongSWAN (the latter of which assumes R81+ gateways).
SNX doesn't support a multi-stage authentication.
Don't believe StrongSWAN does either.

[rlanhellas]

So, I don't have option, I need to use Windows or MacOS. 😞

[G_W_Albrecht]

Read along here - https://strongswan.org/ ! StrongSwan supports MFA with IKEv2 Multiple Authentication Exchanges (RFC 4739). RADIUS is one possibility i saw mentioned.

[rlanhellas]

How can I check if my company use Radius ? Unhappy I don't have access to this informations. 

[PhoneBoy]

You really need to work with your IT folks on this.
They can place restrictions on the exact types of clients you’re allowed to use to connect to the gateway.
Believe their assistance will also be required to use StrongSWAN.

[rlanhellas]

Yes, I agree. But unhappy they said that Linux is not support nowdays.

[G_W_Albrecht]

Why then the change to Fedora 34 ? If the company you are working for can not provide a VPN client for Fedora 34 they also can not tell you to migrate to that OS.