Flex 200 L2TP VPN server

Hi @AndrewBiggs,

Welcome to the Zyxel Community!

Regarding your query about enabling Multi-Factor Authentication (MFA/2FA) for L2TP VPN connections using Nebula Cloud Authentication, we would like to provide you with the current status and available alternatives:

Currently, the USG FLEX series firewall is managed via Nebula, Nebula Cloud Authentication does not support 2FA for L2TP VPN connections, but supported for IPsec VPN.

Therefore, we recommend utilizing IPsec VPN in NCC, which allows you to keep the benefits of centralized Nebula management while gaining the security of 2FA.

However, if your workflow strictly requires L2TP VPN with 2FA, you might need to switch the device to cloud monitor mode or standalone mode.

(Note: Switching management modes will factory reset the device, and all settings will need to be reconfigured from scratch.)

• https://community.zyxel.com/en/discussion/12505/how-to-use-two-factor-with-google-authenticator-for-vpn-access

• https://community.zyxel.com/en/discussion/27390/why-is-the-l2tp-vpn-connection-with-2fa-not-working-on-usg-flex-atp-models