2FA Functionality with VPN Clients

Zyxel_Kevin

Question:
What is the process for using Two-Factor Authentication (2FA) with different VPN clients, especially when using OpenVPN?

Answer:
The way 2FA functionality is presented varies between the Zyxel VPN Client (SecuExtender) and other third-party VPN clients.

• Root Cause: The automatic display of the 2FA authentication page in a browser is specifically integrated into the Zyxel VPN Client (SecuExtender). Other VPN clients do not have this built-in functionality to automatically open the authentication page.
• Resolution:
  • For Zyxel VPN Client (SecuExtender): After successfully connecting to the VPN, the 2FA authentication page will automatically open in your web browser.
  • For Other VPN Clients (e.g., OpenVPN): You must manually open a web browser and navigate to the authentication URL after establishing the VPN connection. The common format for this URL is http://yourdeviceip:8008, where yourdeviceip should be replaced with the actual IP address of your Zyxel device.