MFA Setup Guide

Step‑by‑step instructions for wiring common network devices to DashX MFA over RADIUS (Access‑Challenge), so a VPN or admin login prompts for a second factor.

Using the guide

1. Go to Network → MFA → Setup Guide.
2. Pick your device/vendor — the guide covers the major ones, including Cisco ASA / IOS, Aruba, Juniper, Palo Alto, and FortiGate.
3. Follow the vendor steps: point the device's RADIUS auth at DashX, register it as a NAS Client, and enable challenge/prompt handling so the second factor is requested.

Before you start

• Enroll the users who'll be prompted under Users & Factors.
• Set MFA mode to Optional or Required on the RADIUS Overview, and create an MFA Policy.
• Add the device under NAS Clients so DashX accepts its requests.

tip

Test with one admin account and MFA Optional first — confirm the challenge appears and a push/TOTP completes the login before you set it to Required for everyone.