Google 2FA for Meraki VPN

[wjlawrence]

Got a request to use google 2FA for Meraki VPN.  I can't find any reference documents supporting this.  

Is it supported and is there any documentation about it?

Thank you in advance.

Bill

[Inderdeep]

@wjlawrence : check this out

https://documentation.meraki.com/General_Administration/Other_Topics/Two-Factor_Authentication

[wjlawrence]

I don't see a reference to being able to use Google Authenticator for client-side VPN?

Any thoughts on how that would be achieved?  

Bill

[Inderdeep]

Did you check below the additional resources in the link 

[Make_IT_Simple]

Meraki doesn't support 2FA for client VPN. You will need to use a third party for that. This is an example of how to use DUO:

https://duo.com/docs/meraki-radius 

[Make_IT_Simple]

You will also need to work with support to change the radius timeout for client VPN, the default is 5s which is not enough for FA. Usually, 30 seconds and above work fine.

[Make_IT_Simple]

This doc should also help: https://documentation.meraki.com/General_Administration/Other_Topics/Two-Factor_Authentication#Using...

[PhilipDAth]

Are you a Google GSuite customer and have Google MFA integrated into that?  If so, you may be able to use Cisco AnyConnect in SAML mode to Google GSuite.

https://documentation.meraki.com/MX/AnyConnect_on_the_MX_Appliance/Authentication 

Otherwise, no.  I am not aware of anything else that can use Google Authenticator.

I use Cisco Duo for most of my customers (with SAML ideally).