Infoblox has native support for Certificate authentication -- including CAC and PIV enabled smartcards -- that can be used for 2FA.  Additonally several 2FA prodducts support either TACACS or Radius or both; NIOS supports both TACACS and Radius.