Restrict user to LAN only login and select 2FA for individual users

I’d like to implement 2FA but I also have several wall tablets with their own user accounts. I don’t want the 2FA to expire on that wall tablet every X days and need to log back in. Instead, I’d like to be able to enable 2fa for some user and also restrict login to LAN only for other users.

Most of this is covered in the Auth Provider documentation. Authentication Providers - Home Assistant

Just be incredibly careful you can make things very much less secure by setting things up incorrectly.