Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN With Redundant Backend Authentication Servers (Duo MFA)

    Scheduled Pinned Locked Moved OpenVPN
    1 Posts 1 Posters 375 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      snewby
      last edited by snewby

      So I am in the process of adding 2FA authentication to our pfsense OpenVPN servers. I have a working configuration using Duo MFA and their authentication proxy. It works great the issue I have is I haven't been able to get redundancy working in the authentication servers piece. I can add two authentication servers for backend user auth but it will just try the first one and if that one is down it just times out and won't try the other one. Is there a setting in pfsense to make it try the other server? Or maybe there is a timeout period and it's too long? Below is the relevant section in pfsnese.

      VPN_ OpenVPN_ Servers_ Edit.png

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.