OpenVPN with MFA

[everyonelovescheese]

Hi there

I have a client that I have deployed a PFsense device in. They have now decided they want MFA with one time SMS pass-codes.

I have found https://www.rcdevs.com/docs/howtos/pfsense/pfsense/ this guide. I can use clickatell as the SMS gateway, so all looks good on that side, however, the free version has a 40 user limit.

I intend in integrating it with an existing AD infrastrucutre which has more than 40 users, but only 10 of those will need VPN so I am not sure on the licenseing side with that solution.

Any other more basic solutions that don't involve a Debian VM running as a bridge etc?

Many thanks in advance!