Configuring VPN
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|316
vi. For the second authentication, enter the OTP in the Response
field.
vii. The Cloud Service compares the OTP to the one represented by
the QR code in the application. If it matches, you are connected
to VPN.
The Cloud Service sends a QR code with an OTP when:
n
A new user is configured.
n
The information for an existing user is edited, such as a new
email address is added or the user receives Remote Access
permissions.
n
The admin decides that all users must use Cloud Authentication.
iv. On the Advanced tab, below Dynamic ID Settings, enter the:
n
Length of the one-time password.
n
Amount of time in minutes until the password expires.
n
Maximum number of retries.
v. Below Country Code, enter the Default country code.
vi. Click Apply.
To sign in with Two-Factor Authentication:
i. Connect to your VPN.
ii. You get a prompt for a DynamicID One Time Password (OTP) sent to
your mobile phone as an SMS, or directly to your email account, or by
scanning the QR code.
Notes:
n
VPN Two-Factor Authentication is per gateway, not
administrator.
n
When you turn on Two-Factor Authentication, you enable it for
all VPN clients. This means all VPN users must have a
configured mobile phone number and email address with which
to connect.
To Next Page
