how to create vpn ssl with client openvpn

Options
2»

All Replies

  • rcd
    rcd Posts: 4 image  Freshman Member
    First Comment Friend Collector

    Hi all,

    I could make it work.

    But when you enable 2FA for the VPN, you have to enable 2FA for all your users or they can't reach the LAN.

    I thought you could enable 2FA for the users you want, and the other ones could use the VPN as usual, but apparently no.

    So I don't understand why there is a box to check/uncheck 2FA for each user ?

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,134 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @rcd

    Enabling 2FA stands for more security. Therefore, it is not a good way to enable 2FA for specific users, as it could cause security weaknesses.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 4,228 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited November 14

    On FLEX200 (non H)not per user but per IKE gateway which can be trickly to do two on one WAN IP you can enable or disable for that gateway for given user groups when 2FA is globally enabled.

    Screenshot 2025-11-14 150823.png
  • PeterUK
    PeterUK Posts: 4,228 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）