If you're using DUO they have an Authentication Proxy that you can use to MFA your VPN connection.  I implemented it a few months ago and it works well.    https://duo.com/docs/meraki-radius  ... View more