OPNSense-pfSense.md

Enable 2FA With Google Authenticator

https://wiki.opnsense.org/manual/how-tos/two_factor.html

Creating OpenVPN

https://www.sparklabs.com/support/kb/article/setting-up-an-openvpn-server-with-opnsense-and-viscosity/

Note, auth mode needs to choose TOTP instead of local DB.

(For local test in VM, 1st NIC NAT for WAN, need UDP port forwarding 1194, 2nd NIC host only for LAN)