Implementing Google-Authenticator for SSH
yum install epel-release yum install google-authenticator
auth required pam_google_authenticator.so as the second line (or first method of auth near the top)
/etc/ssh/sshd_config and make sure
ChallengeResponseAuthentication yes is set.
google-authenticator as your user to set the TOTP and choose various options for it.