|
@@ -10,11 +10,22 @@ config interface 'MYVPN'
|
10
|
10
|
option username 'test'
|
11
|
11
|
option password 'secret'
|
12
|
12
|
option serverhash 'AE7FF6A0426F0A0CD0A02EB9EC3C5066FAEB0B25'
|
13
|
|
- option token_mode 'rsa' # when built with stoken support
|
14
|
|
- option token_secret 'secret' # when built with stoken support
|
15
|
13
|
option defaultroute '0'
|
16
|
14
|
option authgroup 'DEFAULT'
|
17
|
15
|
|
|
16
|
+ # For second factor auth:
|
|
17
|
+
|
|
18
|
+ # when a fixed 2FA password can be used
|
|
19
|
+ #option password2 'my-fixed-2fa-password'
|
|
20
|
+
|
|
21
|
+ # RSA tokens, must be built with stoken support
|
|
22
|
+ #option token_mode 'rsa'
|
|
23
|
+ #option token_secret 'secret'
|
|
24
|
+
|
|
25
|
+ # HOTP/TOTP tokens
|
|
26
|
+ #option token_mode 'hotp'
|
|
27
|
+ #option token_secret '00'
|
|
28
|
+
|
18
|
29
|
The additional files are also used:
|
19
|
30
|
/etc/openconnect/user-cert-vpn-MYVPN.pem: The user certificate
|
20
|
31
|
/etc/openconnect/user-key-vpn-MYVPN.pem: The user private key
|