Meraki VPN MFA / Multifactor authentication

[EamonnT]

Hi everyone, 

I'm new to the community, 

has anyone successfully setup dual factor / multifactor authentication when Using VPN to connected to  corporate networks. We just had a security audit and its one of the things they pointed out to us. 

Look forward to your reply's !!

Happy new year to all! 

[KarstenI]

There is no native integration with any MFA providers. You can use any system that uses *one* login through RADIUS and divides this login to authenticate both factors.

I use duo.com for this:

1. User enters his AD-credentials
2. MX sends the login to the Duo authentication-proxy (an app running on Windows or Linux)
3. The Auth-Proxy uses this login to authenticate the User to Active Directory (or through ISE)
4. When the Authentication is successful, the Auth-Proxy queries the Cloud to send a request to the smartphone
5. The user accepts the login on his smart-phone
6. The user is granted access