Our organization was recently required to use MFA for logging into our networking hardware. We're accomplishing this by using Royal Server and Royal TS, and limiting the source IP for SSH and web GUIs to just the IP address of the Royal Server. HP makes this easy using something called "IP Authorization". However, on our Cisco Catalyst 2960s, I can't find the option to do this.
The closest article I could find was here: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst_pon/software/configuration_guide/mng_usrs/b-gpon-config-managing-users/configuring_ip_limit.html
However, pretty much none of the commands specified in that article exist when running thems. Firmware is the latest version available. There doesn't seem to be a way to do this in the web GUI either. Any thoughts?