Firewall - Configure 2FA via Google Authenticator for VPN [Stand-Alone Mode]

This example describes how you can set up VPN in connection with the Google Authenticator on our business firewalls in stand-alone / on-premise mode. This setup is demonstrated using an L2TP VPN connection as an example. 

1. To set up L2TP, first of all have a look here:

How to use the VPN Setup Wizard to create a L2TP VPN on the ZyWALL/USG

After creating the VPN connection, first activate the two-factor authentication option in the VPN gateway settings of the L2TP connection.

2. Create or edit an existing user under

Configuration> Object> User

3. In the settings window of the relevant user click on the Two-factor Authentication tab and activate the option.

Now load the Google Authenticator from the Google Playstore or Apple Appstore onto your smartphone and click on the option "Set up Google Authenticator"

4. After starting the app on your smartphone, scan the QR code displayed in the firewall and enter the corresponding code to link your smartphone.

5. After connecting to L2TP, your client will show up as connected.
Now enter the public WAN IP with port 8008 in your browser to authenticate the VPN connection, it looks like this example:

https://1.2.3.4:8008

There you will then be asked for the code for authentication, which you can generate in the Authenticator app.