Before you can require two-factor authentication for L2TP over IPSec VPN users, you need to configure the Sophos for two-factor authentication.

Then, click on Remote Access/L2TP over IPsec. Select the interface for the users and add a pre-shared key. Select RADIUS as the authentication method. Click Apply.