remote access vpn authentication

Hi, I'm trying to strengthen the authentication for my remote access vpn to a 2-factor setup.  I've heard of Phonefactor and a few other solutions that use your phone as the physical token.  Does anyone have experience with these solutions, and could you recommend one (and why)?  thanks in advance!