Windows 2012 RRAS L2TP VPN + Duo



I’m trying to setup 2 factor auth with windows RRAS and DUO.
I’ve setup rras vpn server, configured auth to use radius server, then setup duo with option radius_client.
But duo auth is bypassed, i’m connecting with vpn with windows user/pass and no duo push is required.
Any help with this?