FlexVPN - AnyConnect and 2FA

[a.feniello]

Hi all,

I have configured a FlexVPN with a CSR1000v as a hub. Clients connect to it through anyconnect.

Authorization and authentication is obtained by querying a radius server which is a Windows Server 2019 with the NPS role installed.

The client wants to enable 2fA with Google Authenticator.
Is this possible?

Thanks in advance for your response!

[Flavio Miranda · Accepted solution]

This document says it is possible but requires a special module on anyconnect.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-16-8/sec-flex-vpn-xe-16-8-book/sec-cfg-flex-aggr.html