We've created an eGuide to adding two-factor authentication to your network. It includes examples using Cisco, Juniper and PAM and incorporates AD for authorization. It basically covers the 'best practice' (sorry!) for adding two-factor.
Please get it and our other papers registration free here: http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers link
Get this guide!