VPN with 2FA don't work

Gaetano
Gaetano Posts: 15  Freshman Member
First Comment Friend Collector Third Anniversary
in Security

Once the VPN is set up, the screen asking for the verification code does not appear. How can I make the screen appear? I have already tried with different types of VPN and enabled the port. Can anyone suggest a solution? Thanks

All Replies

  • valerio_vanni
    valerio_vanni Posts: 133  Ally Member
    5 Answers First Comment Friend Collector Third Anniversary

    You can create, on desktop, a link to http(s)://LANIP:PORT

  • Zyxel_Kay
    Zyxel_Kay Posts: 1,245  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - WLAN Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security

    Hi @Gaetano

    Could you please share with us the firewall model and the type of VPN you’re using?

    If you’re using a USG FLEX/ATP firewall with the Zyxel VPN Client to establish a VPN tunnel, the authentication page should automatically pop up in your browser. However, for SSL VPN or L2TP VPN, the authentication screen does not appear automatically, and you’ll need to manually enter the correct URL in your browser.

    For more detailed guidance, please refer to this article:

    https://community.zyxel.com/en/discussion/12505/how-to-use-two-factor-with-google-authenticator-for-vpn-access

    Additionally, as @valerio_vanni suggested, you can create a shortcut on your desktop or bookmark the URL for easier access.

    Kay

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • Gaetano
    Gaetano Posts: 15  Freshman Member
    First Comment Friend Collector Third Anniversary

    So do I have to start the link created on the desktop and then start the vpn or the other way around?I have a usg flex 200 and I use the windows client for vpn.

  • Zyxel_Kay
    Zyxel_Kay Posts: 1,245  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - WLAN Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security

    Hi @Gaetano

    If you want the authentication page to pop up automatically in your browser, the recommended approach is to use the Zyxel VPN Client (SecuExtender) to establish the VPN connection.

    However, if you're using a different VPN method, you'll need to manually enter the correct URL in your browser to input the verification code. As previously mentioned, creating a desktop shortcut or bookmarking the URL can make this process more convenient.

    Kay

    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • Gaetano
    Gaetano Posts: 15  Freshman Member
    First Comment Friend Collector Third Anniversary

    I have done some tests with secuExtender and the pop-up does not appear, I am using version 4.0.4.0

  • valerio_vanni
    valerio_vanni Posts: 133  Ally Member
    5 Answers First Comment Friend Collector Third Anniversary

    What type of vpn?

    SSL, L2TP, Ipsec

    Only the latest can have automatic popup

  • Gaetano
    Gaetano Posts: 15  Freshman Member
    First Comment Friend Collector Third Anniversary

    SSL o IKEv2,

    thanks for the reply.

    I'll do some tests right away to prove it

  • valerio_vanni
    valerio_vanni Posts: 133  Ally Member
    5 Answers First Comment Friend Collector Third Anniversary
    edited January 8
    https://community.zyxel.com/en/discussion/comment/73534#Comment_73534

    With IKEv2 it should work.

    You have to set http://LanIP:PORT in phase2 settings (script "When this tunnel is opened").

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）