Hi Stuart, some of the commercial systems we have used use Radius as the Authentication Mechanisim...
One could do a rudimentary OTP password system using Radius ... some OTP systems allow for Caching a series of One Time passowrds circa 100 passwords... so it could be fesible to have 100 passowrds listed on a card , and ask the user to enter password X ? Thanks, Tom Smyth On Wed, 2 Nov 2022 at 02:14, Stuart Henderson <stu.li...@spacehopper.org> wrote: > If anyone's got any good suggestions on how to do VPNs with 2FA > on an OpenBSD gateway for non-technical users to access (iOS, Android, > Windows clients) I'd love to hear them. > > I could bodge something together with openvpn and TOTP but it doesn't > exactly spark joy. > > > -- Kindest regards, Tom Smyth.