smfabac
I've a client needing to add two factor authentication to control connections to their network. I stumbled upon openvpn and did a search on two factor (and variants) but did not find an answer to my needs. I could spend another day searching this forum but I hope that someone steeped in openvpn administration can say yea or nay.
The client has a Hot brick LB2-vpn firewall router that is currently used to provide vpn endpoint connections to the network using ipsec. The hot brick can be configured to pass through ipsec to a VPN server. The client runs a SCO UNIX box and 20 Windows PC's with four users with laptops that need VPN connections to the office LAN. There is no windows server. There is no windows domain controller. The SCO box does not have PAM capability.
Question: Will openVPN fit in this environment and allow me to add two factor authentication for the VPN tunnels?
I need to have this up and running by 8/12/11
janjust
openvpn and ipsec are not interchangeable.
You could replace the ipsec solution using openvpn.
An easier approach might be to use X509 certificates for your ipsec connection and then use a hardware token (smart card or usb token) to store the certificate+key on the card. When using ipsec this is way off-topic for this forum.
OpenVPN also supports two factor authentication using smart cards, but you need an openvpn server + clients for that to work. Two factor authentication using OpenVPN is explained in my book.
