We're implementing RHEL 6.3 and looking to use the dual authentication mechanism provided by
What I'm wondering is if it's possible to only apply this to connections from a certain subnet e.g. coming in externally via firewall and just use password for other (internal) connections?
I'd like to configure two virtual machines for this remote access (gateways), but would like it if a user connects and logs into one of these machines that they could then scp (for example) to the other machine, across the internal network, without requiring another private key.
If sshd could chose authentication mechanism based on where the user was connecting from that would be ideal.