Two-Factor Authentication (2FA) for OpenVPN

Last updated on May 16, 2024

Overview of 2FA for OpenVPN

Two-Factor Authentication (2FA) for OpenVPN is an added layer of security that requires users to provide two forms of authentication in order to gain access to OpenVPN. The first factor requires the user to enter their Active Directory / RADIUS username and password. Once this first factor has been successfully completed, the user is then subjected to a secondary authentication step in the form of one of the available authentication methods such as Mobile Push or Email Link. Completion of both factors will grant the user access to the resource. Enabling Two-Factor Authentication (2FA) for OpenVPN makes it extremely difficult for hackers to gain access to resources even if they have obtained a user’s login credentials.

Rublon introduces Two-Factor Authentication in a number of ways. Various OpenVPN products are supported. Read further to find out more about supported products and Authentication Methods.

Demo Video

Before you start

Ensure you have a properly configured OpenVPN product.

Configuration of 2FA for OpenVPN

Depending on your requirements and the OpenVPN product you would like to integrate with Rublon, you will have to use either Rublon Authentication Proxy or Rublon Access Gateway. Both solutions have their advantages. Refer to the documentations of specific OpenVPN products to find out which means of integration are supported.

Both Rublon Authentication Proxy and Rublon Access Gateway support RADIUS and LDAP (OpenLDAP, Microsoft Active Directory) authentication sources.

Rublon Authentication Proxy supports the following Authentication Methods: Email Link, Mobile Push, Passcode.

Rublon Access Gateway supports all Authentication Methods.

Rublon MFA for OpenVPN Community Edition (Open Source)

Integrate your OpenVPN with Rublon to introduce Two-Factor Authentication (2FA) to your VPN logins. You have to install and configure Rublon Authentication Proxy before configuring Rublon MFA for OpenVPN.

The following documentation describes enabling Rublon Multi-Factor Authentication for OpenVPN Community Edition (Open Source).

Known limitations:

This configuration is Linux only.

Read the documentation for Rublon 2FA for OpenVPN Community Edition (Open Source).

Rublon MFA for OpenVPN on pfSense

The following documentation describes using pfSense in tandem with OpenVPN and refers to the OpenVPN Open Source Community version of OpenVPN, which differs from OpenVPN Access Server.

Read the documentation for Rublon 2FA for OpenVPN on pfSense

Rublon MFA for OpenVPN Cloud

Integrate your OpenVPN Cloud with Rublon to introduce Two-Factor Authentication (2FA) to your logins. You have to install and configure Rublon Access Gateway before configuring Rublon MFA for OpenVPN Cloud. Rublon Access Gateway gives you access to all Authentication Methods and allows you to experience the full power of Rublon.

Read the documentation for Rublon MFA for OpenVPN Cloud