DUO and Cisco IOS

Hello there we have several Cisco IOS switches that we want to enable 2FA using DUO. Which version of DUO is required for this and is there any step-by-step tutorials available for setting this up?

It looks like IOS switches may support RADIUS authentication: RADIUS Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) - Configuring RADIUS [Support] - Cisco

If that’s true for your specific switch you may be able to add Duo authentication via RADIUS.

Follow these instructions for deploying a Duo Authentication Proxy with a generic RADIUS configuration, and also the RADIUS AAA instructions for your specific switch - basically when you get to the " Configure Your RADIUS Client(s)" section of that linked Duo doc, switch to your IOS documentation to follow the instructions for adding the Duo server as a RADIUS server on the switch.

i’ve set it all up i get a successful RADIUS login on my switch but i dont get the prompt for the DUO 2FA. What did I miss?

I don’t know because I don’t know what steps you took to set it up. :slight_smile: