Another simple option for MFA with RADIUS is with NetIQ's Adavanced Authentication Framework that supports a wide range of Multi-Factor Authentication options including, voice, sms, smartphone app, soft or hard tokens, USB key tokens like yubi keys, and much more.  Gives you lots of options beyond the traditional hard token.

Mark