Draytek Vigor2136 Series User Manual page 231

MFA
Account Info
General
Allowed VPN Protocols
Multi-factor authentication (MFA) can offer a more secure network
connection.
Enable MFA – Switch the toggle to enable/disable the MFA function.
Allowed MFA Method - Select to require TOTP, Email, SMS and/or

mOTP authentication when logging in from the WAN.
TOTP – For the Time-based One-time Password (TOTP) mechanism,
please make sure the time zone of your router is correct. Then, install
Google Authenticator APP on your cell phone. Open the APP to scan
the QR code on this page. A one-time password will be shown on your
phone.
In the filed of Validation Code, enter the one-time password and click
Verify.
Now, the configuration is finished. You will be asked to enter the 2FA
code on the after passing the username and password authentication.
SMS/Email – The password will be transferred via the SMS and/or
Mail profiles selected from User Information above.
mOTP - Mobile one-Time Password (mOTP) allows the use of mOTP
passwords. Enter the PIN Code and Secret settings for getting
one-time passwords.
Displays general information (created time, last login at and last login
IP) for the VPN user account.
Teleworker VPN
(available if IAM User is selected as the Usage)
Enable Teleworker VPN – Switch the toggle to enable/disable
Teleworker VPN configuration.
Idle Timeout – If the user is idle over the limitation of the timer, the
network connection will be stopped for such user. By default, the
Idle Timeout is set to 300 seconds.
VPN Schedule – Select Always On. Or choose Scheduled On to make
the VPN connection based on the schedule.
Before configuring VPN Schedule, add the required time intervals in
Configuration>>Objects >>Schedule.
Download SmartVPN Client – Click to download the utility of
DrayTeck SmartVPN client for building VPN connection.
Select IPsec, WireGuard or OpenVPN as the protocol for the
teleworker VPN connection.
Enable IPsec – Switch the toggle to enable the IPsec protocol.
Allowed IPsec Protocols – Select IKEv1/v2, EAP and/or XAuth as the
221