VPN with 2FA don't work

Gaetano

Once the VPN is set up, the screen asking for the verification code does not appear. How can I make the screen appear? I have already tried with different types of VPN and enabled the port. Can anyone suggest a solution? Thanks

valerio_vanni

You can create, on desktop, a link to http(s)://LANIP:PORT

Zyxel_Kay

Hi @Gaetano

Could you please share with us the firewall model and the type of VPN you’re using?

If you’re using a USG FLEX/ATP firewall with the Zyxel VPN Client to establish a VPN tunnel, the authentication page should automatically pop up in your browser. However, for SSL VPN or L2TP VPN, the authentication screen does not appear automatically, and you’ll need to manually enter the correct URL in your browser.

For more detailed guidance, please refer to this article:

https://community.zyxel.com/en/discussion/12505/how-to-use-two-factor-with-google-authenticator-for-vpn-access

Additionally, as @valerio_vanni suggested, you can create a shortcut on your desktop or bookmark the URL for easier access.

Gaetano

So do I have to start the link created on the desktop and then start the vpn or the other way around?I have a usg flex 200 and I use the windows client for vpn.

Zyxel_Kay

Hi @Gaetano

If you want the authentication page to pop up automatically in your browser, the recommended approach is to use the Zyxel VPN Client (SecuExtender) to establish the VPN connection.

However, if you're using a different VPN method, you'll need to manually enter the correct URL in your browser to input the verification code. As previously mentioned, creating a desktop shortcut or bookmarking the URL can make this process more convenient.

Gaetano

I have done some tests with secuExtender and the pop-up does not appear, I am using version 4.0.4.0

valerio_vanni

What type of vpn?

SSL, L2TP, Ipsec

Only the latest can have automatic popup

Gaetano

SSL o IKEv2,

thanks for the reply.

I'll do some tests right away to prove it

valerio_vanni

https://community.zyxel.com/en/discussion/comment/73534#Comment_73534

With IKEv2 it should work.

You have to set http://LanIP:PORT in phase2 settings (script "When this tunnel is opened").