Error ISE and Duo

[Fernandomp7]

Hey guys,

VPN on Firepower authenticating on ISE -> OK

VPN on Firepower authenticating on Duo -> OK

VPN on Firepower authenticating on ISE calling external Radius (Duo) for MFA -> NOK

Duo's auth proxy logging shows: "20): Cannot decode password using the configured radius_secret. Please ensure the client and Authentication Proxy use the same shared secret."

I have changed secrets several times.. everything else works perfectly.

Duo auth proxy 5.3 and ISE 3.3

Any ideas?

Thanks!

Fernando

[Pulkit Mittal]

Hi There,

I was thinking if radius secret was being encrypted and then copied. But I found this kb article which has that as one of the causes with others that you may have checked already. But see if it helps.

https://duo.my.site.com/s/article/1168?language=en_US

Regards,

Pulkit M.

If you find this useful, please mark it helpful and accept the solution.