Multi-Factor Authentication (2FA/MFA) for SonicWall SMA – RADIUS

Last updated on July 1, 2026

Overview

The purpose of this document is to enable Rublon Two-Factor Authentication (2FA) for users logging in to SonicWall SMA 8200v. In order to achieve that using RADIUS (e.g., FreeRADIUS) as the source of authentication, you have to use Rublon Authentication Proxy.

Enable Entra ID logins to SonicWall SMA using Rublon MFA

If SonicWall SMA authenticates users through LDAP or RADIUS, you can use Rublon Authentication Proxy to validate primary credentials against Microsoft Entra ID and then enforce Rublon MFA. This allows users to sign in to SonicWall SMA with Microsoft Entra ID credentials, even when SonicWall SMA does not support Microsoft Entra ID, SAML, OAuth 2.0, or OpenID Connect natively.

See how to authenticate LDAP and RADIUS with Microsoft Entra ID credentials and MFA, or explore the related use case: Microsoft Entra ID logins for LDAP and RADIUS applications with MFA.

Supported Authentication Methods

Authentication Method	Supported	Comments
Mobile Push	✔	N/A
FIDO	–	N/A
Passcode	✔	N/A
SMS Passcode	–	N/A
SMS Link	✔	N/A
Phone Call	✔	N/A
QR Code	–	N/A
Email Link	✔	N/A
YubiKey OTP	✔	N/A
RFID	–	N/A

Before you start

You need to install and configure Rublon Authentication Proxy itself before configuring SonicWall SMA 8200v to work with it. Please read the Rublon Authentication Proxy documentation and follow the steps in the Installation and Configuration sections. Afterwards, follow the Configuration section in this document.

Configuration

1. Log in to the SonicWall management GUI.

2. Go to System Configuration → Authentication servers.

3. Select New… in the top right corner.

4. Select RADIUS in Authentication directory.

5. Select Username/Password in Credential Type.

6. Click Continue….

7. Set a name, for example Rublon Authentication Proxy.

8. Enter the IP or FQDN of your Rublon Authentication Proxy server in Primary RADIUS server.

9. Enter the RADIUS Secret set in Rublon Authentication Proxy as the Shared Secret in this form.

10. Set Connection timeout to 180.

11. Click Save to create a new authentication server.

8. Go to User Access → Realms.

9. Select +New realm in the top right corner.

10. Set a name for the new realm in the Name field.

11. Set the status to enabled.

12. Check Display this realm.

13. Select the previously created Rublon Authentication Proxy server in Authentication Server.

14. Click Save to add a new realm.

15. Go to Security Administration → Users & Groups.

16. Click New and create a new account whose name corresponds to the cn of a user in the authentication source set in Rublon Access Gateway (in the case of Active Directory).

17. Click Pending changes in the top right corner, and then click Apply Changes.

18. Your configuration is now finished. Users have Rublon 2FA enabled when logging in to your VPN.

Log in to SonicWall SMA with Rublon 2FA

1. Open SonicWall SMA.

2. Select the realm to log in to. Click Next.

3. Provide your username and password. Click Log in.

4. Let’s assume Mobile Push is the authentication method chosen in Rublon Authentication Proxy. You will be sent a push notification. Tap APPROVE.

5. You will be successfully logged in to your VPN.

Troubleshooting

If you encounter any issues with your Rublon MFA integration, contact Rublon Support.

Related Posts

Rublon Authentication Proxy

Rublon Authentication Proxy – Integrations