It is now possible to use OTP for 2FA in Openconnect.
This requires an OTP key. It will be useful to have this capability directly from the VyOS CLI.
Suggested commands to get started:
Simple command (with default parameters):
generate openconnect username usr4 otp-key hotp-time
Complete command:
generate openconnect username usr4 otp-key hotp-time interval 60 digits 8