Skip to main content
johnathan
Staff
Staff
November 11, 2024

Technical Tip: How to use 2FA with the native Windows VPN client

  • November 11, 2024
  • 0 replies
  • 1355 views
Description This article describes how to use a FortiToken with the native Windows VPN client.
Scope FortiOS.
Solution

It is possible to use a FortiToken with L2TP by appending the token onto the password. Here a local user is configured with a FortiToken, they are inside of a group specified in the L2TP config.

 

ftk1.PNG

l2tp.PNG

 

When trying to sign in with no token, it is possible to see the tunnel does not come up.

 

l2tp_nopass.PNG

 

deny.PNG

 

When the token is appended to the password, the connection is successful.

 

token.PNG
connected.PNG

 

The FNBAMD debug taken while authenticating also confirms this. A non-zero return code indicates a failure.

The red attempt is done with no token, and the green attempt is done with the token.

 

fnbamd debug.PNG

 

This same behavior can be replicated too in native IPsec Dial-up VPN to iOS devices running the 18.2 version.