OPNsense - How to Configure 2FA TOTP with any Password Authenticator

In this video, I will show you how to config 2FA Timebased One Time Password (TOTP) on #OPNsense.
➡️ A step-by-Step instruction: bit.ly/3LLPlqo
➡️ Should you find this tutorial helpful, we kindly request that you consider supporting our channel by subscribing to our UA-cam channel or using the affiliated links and URL shortener links provided below. Through your purchase using any of the given links, we will receive a small commission, which we will use to expand our channel and enhance our services. We appreciate your support, and we remain committed to providing you with quality content.
⚠️ FTC Disclaimersysadmin102.com/disclaimer-ft....
♡ Ways to support: sysadmin102.com/ways-to-suppo...
🌐 Website: sysadmin102.com/
✉️ Business Inquiry: [e-mail]
© SYSADMIN102™ LLC

[@zyghom]

EXCELLENT! thx

[@swubutu]

Thanks for this eazy tutorial !!

[@ralph4370]

Can you only enable TOTP for Root and no one else? Or would this affect VPN users to use MFA? Would this also work for Aegis Authenticator?

[@sysadmin102]

I don't think you can enable TOTP for a single user. VPN server has the option for backend authentication selection, as long as you select Local User Access, then TOTP is not enforced. You will have test it, I don't see why it wouldn't.

[@christianfilouler]

I would like TOTP to be used for VPN dial-in, not for logging into OpnSense, but for external VPN users to log in with TOTP. Is that possible?

[@sysadmin102]

It’s possible. I’ll cover this under the my new series, OPNSense security hardening.

[@user-zr7kz4vs7c]

May I ask what is the difference between /bin/sh , /bin/tcsh, and /bin/csh ? thank you !

[@sysadmin102]

Just a different version of Shells

[@user-zr7kz4vs7c]

@@sysadmin102 may I ask which one should I choose? Thanks

[@sysadmin102]

Any is fine. sh is the most popular one