How to config Two-Factor authentication in mobile access VPN on Gaia ?

[Herschel_Liang]

Hi all,

As the title, how to config Two-Factor authentication  in mobile access VPN on CP? Such as with AD, Radius and other authenticate(OTP) device on CP in mobile access VPN?

                                                                                                                                       -> AD

1.   mobile access VPN user    ->   CP(mobile access VPN GW) -> Radius Server -> OTP

                                                                                                         -> OTP

2.  mobile access VPN user     ->   CP(mobile access VPN GW) -> AD

I can not find any guide about this type of guide but issue or troube in support center. Who can give us a example template for me? THX!

Best Regards!

[cstueckrath]

you could follow this guide replacing WikID with your solution.

We are evaluating PrivacyIdea together with freeradius and it works quite well.

I would love to hear from your experiences while setting your solution up, though.

[Nick_Owen]

I wrote the WiKID/Checkpoint documentation and am happy to answer any questions to the best of my ability.  You can see the entire list here: Our list of tutorials for adding two-factor authentication to check-point. .