https://community.cisco.com/t5/network-security/ise-duo-configuration-for-cli-mfa/m-p/4648776#M1091780 <P>Good morning Everyone.</P><P>i am looking for documentation and coaching perhaps on how to implemnt DUO MFA for my Cisco 9k switches which are managed by DNAC today.</P><P>i rougly have 400+ 9ks i need to implemnt this across.</P><P>we initially configured a external radius source for our DUO proxy server but that configuration did not provide the solution we needed.&nbsp;</P><P>we followed this DUO document:</P><P><A href="https://duo.com/docs/ciscoise-radius#overview" target="_blank" rel="noopener">https://duo.com/docs/ciscoise-radius#overview</A></P><P>when we made this configuration change to ISE, no prompt was given when we tested CLI SSH access to some of our switches.&nbsp;&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 12 Jul 2022 13:42:50 GMT OaklandCounty_Mike 2022-07-12T13:42:50Z https://community.cisco.com/t5/network-security/ise-duo-configuration-for-cli-mfa/m-p/4648776#M1091780 <P>Good morning Everyone.</P><P>i am looking for documentation and coaching perhaps on how to implemnt DUO MFA for my Cisco 9k switches which are managed by DNAC today.</P><P>i rougly have 400+ 9ks i need to implemnt this across.</P><P>we initially configured a external radius source for our DUO proxy server but that configuration did not provide the solution we needed.&nbsp;</P><P>we followed this DUO document:</P><P><A href="https://duo.com/docs/ciscoise-radius#overview" target="_blank" rel="noopener">https://duo.com/docs/ciscoise-radius#overview</A></P><P>when we made this configuration change to ISE, no prompt was given when we tested CLI SSH access to some of our switches.&nbsp;&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 12 Jul 2022 13:42:50 GMT https://community.cisco.com/t5/network-security/ise-duo-configuration-for-cli-mfa/m-p/4648776#M1091780 OaklandCounty_Mike 2022-07-12T13:42:50Z